Huawei Taurus-AN00B Elevation of Privilege Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A security vulnerability exists in Huawei Taurus-AN00B versions prior to 10.1.0.156, which stems from a lack of privilege restrictions on certain business functions of the product. An attacker can exploit the vulnerabili...

HUAWEI Mate 20 Buffer Overflow Vulnerability

HUAWEI Mate 20 is a smartphone launched by Huawei. A buffer overflow vulnerability exists in the Bluetooth module in previous versions of HUAWEI Mate 20 10.0.0.188 C00E74R3P8. The vulnerability stems from insufficient input validation. An attacker can exploit the vulnerability to achieve code...

Huawei Mate 30 (5G) Taurus-AN00B Buffer Overflow Vulnerability

Huawei Mate 305G Taurus-AN00B is the official firmware for Huawei Mate 305G. A buffer overflow vulnerability exists in versions prior to Huawei Taurus-AN00B 10.1.0.156 C00E155R7P2. The vulnerability stems from a function in the module that does not adequately validate input. An attacker could use...

HUAWEI Mate 20 JavaScript Injection Vulnerability

Huawei Mate 20 is a smartphone from Chinese company Huawei Huawei. An injection vulnerability exists in previous versions of Huawei HUAWEI Mate 20 10.1.0.163 C00E160R3P8, which stems from a module that does not perform input checksums on specific inputs. An attacker can exploit this vulnerability...

CVE-2020-9113

HUAWEI Mate 20 versions earlier than 10.0.0.188C00E74R3P8 have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth messages after successful paring, causing buffer overflow. Successful exploit may cause cod...

CVE-2020-9263

HUAWEI Mate 30 versions earlier than 10.1.0.150C00E136R5P3 and HUAWEI P30 version earlier than 10.1.0.160C00E160R2P11 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a...

CVE-2020-9092

HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...

CVE-2020-9263

HUAWEI Mate 30 versions earlier than 10.1.0.150C00E136R5P3 and HUAWEI P30 version earlier than 10.1.0.160C00E160R2P11 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a...

CVE-2020-9092

HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...

CVE-2020-9113

HUAWEI Mate 20 versions earlier than 10.0.0.188C00E74R3P8 have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth messages after successful paring, causing buffer overflow. Successful exploit may cause cod...

Design/Logic Flaw

HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...

Buffer overflow

HUAWEI Mate 20 versions earlier than 10.0.0.188C00E74R3P8 have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth messages after successful paring, causing buffer overflow. Successful exploit may cause cod...

CVE-2020-9113

HUAWEI Mate 20 versions earlier than 10.0.0.188C00E74R3P8 have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth messages after successful paring, causing buffer overflow. Successful exploit may cause cod...

CVE-2020-9113

Huawei Mate 20 devices with firmware older than 10.0.0.188 (C00E74R3P8) are affected by CVE-2020-9113 due to a buffer overflow in the Bluetooth module caused by insufficient input validation. An unauthenticated attacker can craft Bluetooth messages after pairing, potentially leading to code execu...

CVE-2020-9263

CVE-2020-9263 affects Huawei Mate 30 (before 10.1.0.150 C00E136R5P3) and Huawei P30 (before 10.1.0.160 C00E160R2P11). It is a use-after-free vulnerability where the system may reference freed memory; exploitation requires user to run a crafted app with normal privileges and could lead to code exe...

CVE-2020-9092

HUAWEI Mate 20 versions earlier than 10.1.0.163C00E160R3P8 have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module...

CVE-2020-9092

CVE-2020-9092 affects Huawei Mate 20 devices running versions earlier than 10.1.0.163 (C00E160R3P8). The issue is a JavaScript injection vulnerability where a module does not verify specific input, allowing attackers to bypass the filter mechanism and inject JavaScript, potentially compromising t...

GravityRAT: The spy returns

In 2018, researchers at Cisco Talos published a post on the spyware GravityRAT, used to target the Indian armed forces. The Indian Computer Emergency Response Team CERT-IN first discovered the Trojan in 2017. Its creators are believed to be Pakistani hacker groups. According to our information, t...

CVE-2020-9109

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful...

CVE-2020-9109

There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker need to gain certain information in the victim's smartphone to launch the attack, and successful...