Command Execution Vulnerability in Media Mate

Media Mate is a media center similar to Plex. Media Mate has a command execution vulnerability that can be exploited by an attacker to execute a malicious exe file...

CVE-2020-1839

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted...

CVE-2020-1838

HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150C00E136R5P3 have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pas...

CVE-2020-1839

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted...

CVE-2020-9261

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code...

CVE-2020-9261

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code...

CVE-2020-9262

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful...

CVE-2020-1838

HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150C00E136R5P3 have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pas...

CVE-2020-9262

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful...

Authentication flaw

HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150C00E136R5P3 have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pas...

Race condition

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted...

Design/Logic Flaw

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful...

Type confusion

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code...

CVE-2020-1839

Huawei Mate 30 devices running versions earlier than 10.1.0.150 (C00E136R5P3) are affected by a race-condition vulnerability. A timing window allows a concurrent process to modify certain pointer members, enabling code execution after tricking a user into running a crafted app with elevated privi...

CVE-2020-1839

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted...

CVE-2020-9261

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code...

CVE-2020-9261

The CVE-2020-9261 entry applies to Huawei Mate 30 devices running versions earlier than 10.1.0.150 (C00E136R5P3). The vulnerability is a type confusion flaw where the system fails to properly check/transform certain variable types, enabling an attacker to trick the user into installing and runnin...

CVE-2020-1838

HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150C00E136R5P3 have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pas...

CVE-2020-1838

Summary (CVE-2020-1838): Huawei Mate 30 Pro devices running versions before 10.1.0.150 (C00E136R5P3) are affected by an improper authentication vulnerability in which the device does not sufficiently validate a user face credential. An attacker could craft a facial credential to bypass authentica...

CVE-2020-9262

Huawei Mate 30 devices running versions older than 10.1.0.150 (C00E136R5P3) are affected by a use-after-free vulnerability in the system that may reference memory after it has been freed. Successful exploitation requires tricking the user into launching a crafted application with high privileges,...