PT-2020-20546

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R2P11 HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8 Since both versions are essentially the same, with the difference being in the patch level R2P11 vs R3P8, and given that R3P...

CVE-2020-9251: Undefined Security Weakness

HUAWEI Mate 20 smartphones with versions earlier than 10.1.0.160C00E160R2P11 have an improper authorization vulnerability. The software does not properly restrict certain operation in certain scenario, the attacker should do certain configuration before the user turns on student mode function...

CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

Authorization

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-9252

HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8, HUAWEI Mate 20 X versions earlier than 10.1.0.135C00E135R2P8, HUAWEI Mate 20 RS versions earlier than 10.1.0.160C786E160R3P8, and Honor Magic2 smartphones versions earlier than 10.1.0.160C00E160R2P11 have a path traversal vulnerability...

CVE-2020-9252

HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8, HUAWEI Mate 20 X versions earlier than 10.1.0.135C00E135R2P8, HUAWEI Mate 20 RS versions earlier than 10.1.0.160C786E160R3P8, and Honor Magic2 smartphones versions earlier than 10.1.0.160C00E160R2P11 have a path traversal vulnerability...

CVE-2020-9256

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-9256

CVE-2020-9256 affects Huawei Mate 30 Pro and is caused by improper authorization where apps can misuse system services. Exploitation would require user interaction (malicious app installation) and could result in denial of audio service. Connected documents confirm the vulnerability's presence i...

CVE-2020-9252

HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8, HUAWEI Mate 20 X versions earlier than 10.1.0.135C00E135R2P8, HUAWEI Mate 20 RS versions earlier than 10.1.0.160C786E160R3P8, and Honor Magic2 smartphones versions earlier than 10.1.0.160C00E160R2P11 have a path traversal vulnerability...

CVE-2020-9252

CVE-2020-9252 affects HUAWEI Mate 20 (pre-10.1.0.160), Mate 20 X (pre-10.1.0.135), Mate 20 RS (pre-10.1.0.160) and Honor Magic2 (pre-10.1.0.160). The issue is a path traversal vulnerability caused by insufficient validation of certain pathname handling from a process, enabling a crafted path to w...

Huawei Mate 30 Pro Improper Authorization Vulnerability

Huawei Mate 30 Pro is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei Mate 30 Pro 10.1.0.150 C00E136R5P3, which stems from the program's failure to properly restrict an application's use of system services. The vulnerability can be...

PT-2020-20547

Name of the Vulnerable Software and Affected Versions HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8 HUAWEI Mate 20 X versions earlier than 10.1.0.135C00E135R2P8 HUAWEI Mate 20 RS versions earlier than 10.1.0.160C786E160R3P8 Honor Magic2 smartphones versions earlier than...

PT-2020-20550

Name of the Vulnerable Software and Affected Versions Huawei Mate 30 Pro versions prior to 10.1.0.150C00E136R5P3 Description The issue is related to improper authorization, where the system fails to properly restrict the use of system services by applications. An attacker could exploit this by...

CVE-2020-9256: Undefined Security Weakness

Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150C00E136R5P3 have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful...

CVE-2020-9252: Improper Limitation of a Pathname to a Restricted Directory

HUAWEI Mate 20 versions earlier than 10.1.0.160C00E160R3P8, HUAWEI Mate 20 X versions earlier than 10.1.0.135C00E135R2P8, HUAWEI Mate 20 RS versions earlier than 10.1.0.160C786E160R3P8, and Honor Magic2 smartphones versions earlier than 10.1.0.160C00E160R2P11 have a path traversal vulnerability...

Command Execution Vulnerability in Media Mate

Media Mate is a media center similar to Plex. Media Mate has a command execution vulnerability that can be exploited by an attacker to execute a malicious exe file...

CVE-2020-9261

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker tricks the user into installing then running a crafted application, successful exploit could cause code...

CVE-2020-9262

HUAWEI Mate 30 with versions earlier than 10.1.0.150C00E136R5P3 have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful...