CVE-2020-9064

Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167C00E166R4P1 have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading...

CVE-2020-9064

Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167C00E166R4P1 have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading...

CVE-2020-1792

Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156C00E156R2P4 and versions earlier than BKL-L09 10.0.0.146C432E4R1P4 have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter wh...

CVE-2020-1792

Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156C00E156R2P4 and versions earlier than BKL-L09 10.0.0.146C432E4R1P4 have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter wh...

Input validation

Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156C00E156R2P4 and versions earlier than BKL-L09 10.0.0.146C432E4R1P4 have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter wh...

CVE-2020-1792

Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156C00E156R2P4 and versions earlier than BKL-L09 10.0.0.146C432E4R1P4 have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter wh...

Huawei Honor V10 Buffer Overflow Vulnerability

Huawei Honor V10 is a smartphone product from Chinese company Huawei Huawei. A buffer overflow vulnerability exists in Huawei Honor V10 versions prior to BKL-AL20 10.0.0.156 C00E156R2P4 and prior to BKL-L09 10.0.0.146 C432E4R1P4, which stems from a failure to adequately validate incoming...

CVE-2020-3836

An access issue was addressed with improved memory management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to determine kernel memory layout...

CVE-2020-3830

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10.15.3. A malicious application may be able to overwrite arbitrary files...

Input validation

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10.15.3. A malicious application may be able to access restricted files...

Type confusion

A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to execute arbitrary code with system privileges...

CVE-2020-3830

A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10.15.3. A malicious application may be able to overwrite arbitrary files...

CVE-2020-3836

An access issue was addressed with improved memory management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A malicious application may be able to determine kernel memory layout...

Authentication flaw

HUAWEI P30 smartphones with versions earlier than 10.0.0.173C00E73R1P11 have an improper authentication vulnerability. Due to improperly validation of certain application, an attacker should trick the user into installing a malicious application to exploit this vulnerability. Successful exploit...

CVE-2020-0014

It is possible for a malicious application to construct a TYPETOAST window manually and make that window clickable. This could lead to a local escalation of privilege with no additional execution privileges needed. User action is needed for exploitation.Product: AndroidVersions: Android-8.0...

CVE-2020-0014

It is possible for a malicious application to construct a TYPETOAST window manually and make that window clickable. This could lead to a local escalation of privilege with no additional execution privileges needed. User action is needed for exploitation.Product: AndroidVersions: Android-8.0...

Buffer overflow

In onCreate of CertInstaller.java, there is a possible way to overlay the Certificate Installation dialog by a malicious application. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product:...

Privilege escalation

It is possible for a malicious application to construct a TYPETOAST window manually and make that window clickable. This could lead to a local escalation of privilege with no additional execution privileges needed. User action is needed for exploitation.Product: AndroidVersions: Android-8.0...

CVE-2020-0014

It is possible for a malicious application to construct a TYPETOAST window manually and make that window clickable. This could lead to a local escalation of privilege with no additional execution privileges needed. User action is needed for exploitation.Product: AndroidVersions: Android-8.0...

Huawei P30 has a security vulnerability

Huawei P30 is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in Huawei P30 versions prior to 10.0.0.173 C00E73R1P11. An attacker can exploit the vulnerability by tricking users into installing a malicious application to bypass authentication and perform illegal...