Huawei Mate 20 X path traversal vulnerability

Huawei Mate 20 X is a smartphone from Chinese company Huawei Huawei. A path traversal vulnerability exists in the Share feature in Huawei Mate 20 X. The vulnerability stems from the failure of the software to properly verify the path of the transferred file during a transfer using Huawei share. A...

Huawei Mate 20 X, Mate 20 and Honor Magic 2 security bypass vulnerability

Huawei Mate 20, among others, is a smartphone from the Chinese company Huawei Huawei. A security vulnerability exists in the Huawei Mate 20 X, Mate 20, and Honor Magic 2, which stems from the system's inadequate verification of permissions. An attacker can exploit the vulnerability to bypass FRP...

Vulnerability of the start_TA_task function (with a shift of 0x137F7C) in the TEE OS Trusted Core component of the operating system’s SMC handler. This vulnerability allows a malicious actor to trigger a service failure in the Huawei Mate 9 Pro mobile phone’s microprogramming system.

The vulnerability of the startTAtask function with a offset of 0x137F7C in the SMC handler of the operating system TEE OS Trusted Core in the microprogramming environment of the Huawei Mate 9 Pro mobile phone is related to the assignment of an untrusted pointer. Exploiting this vulnerability can...

Vulnerability of the `init_agent2TA_context` function in the `TEEOS.img` file (offset 0x13949C) of the TEE OS Trusted Core component in the microprogramming system of the Huawei Mate 9 Pro mobile phone. This vulnerability allows an attacker to trigger a service failure or to read the virtual memory of the TEE OS at arbitrary addresses.

The vulnerability of the initagent2TAcontext function in the TEEOS.img file with a offset of 0x13949C in the SMC handler of the TEE OS Trusted Core in the microprogramming of the Huawei Mate 9 Pro mobile phone is related to the lack of validation for the remap value passed in the request...

The vulnerability of the TEEOS.img file (with a offset of 0x158608) in the SMC-processor’s GLOBAL_CMD_ID_LOAD_SECURE_APP function of the TEE OS Trusted Core in the microprogramming system of the Huawei Mate 9 Pro mobile phone. This vulnerability allows an attacker to cause a service failure, modify program algorithms (by changing the flags from TRUE/FALSE), or compromise critical data stored in physical memory.

The vulnerability of the TEEOS.img file with a offset of 0x158608 in the SMC-processor’s GLOBALCMDIDLOADSECUREAPP function of the TEE OS Trusted Core in the microprogramming of the Huawei Mate 9 Pro mobile phone is related to the swapping of an unauthorized pointer. Exploiting this vulnerability...

The vulnerability of the SMC-processor GLOBAL_CMD_ID_NEED_LOAD_APP in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone operating system allows a perpetrator to trigger a service failure, modify program algorithms (by changing the flags from TRUE/FALSE), or compromise critical data stored in physical memory.

The vulnerability of the SMC-processor GLOBALCMDIDNEEDLOADAPP in the TEE OS Trusted Core of the Huawei Mate 9 Pro mobile phone operating system is related to the lack of validation for input data. Exploiting this vulnerability can allow an attacker to cause service failures, modify program...

CVE-2019-5305

The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159C185 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a...

CVE-2019-5305

The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159C185 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a...

Double free

The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159C185 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a...

CVE-2019-5305

The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159C185 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a...

CVE-2019-5305

CVE-2019-5305 affects the image processing module on some Huawei Mate 10 devices (before ALP-L29 9.0.0.159). The root cause is a memory double-free vulnerability that can be triggered when a user installs a malicious app and it calls a specific API, potentially leading to a system crash. Public d...

CVE-2019-5217

There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 C00E61R1P8T8. An attacker could view the photos after a series of operations without unlocking the screen lock. Successful exploit could cause an information disclosure...

CVE-2019-5217

There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 C00E61R1P8T8. An attacker could view the photos after a series of operations without unlocking the screen lock. Successful exploit could cause an information disclosure...

Information disclosure

There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 C00E61R1P8T8. An attacker could view the photos after a series of operations without unlocking the screen lock. Successful exploit could cause an information disclosure...

CVE-2019-5217

The CVE-2019-5217 entry concerns Huawei Mate 9 Pro smartphones (prior to versions such as LON-L29C/LON-AL00B9.0.1.150) with an information-disclosure vulnerability. According to NVD, an attacker could view photos after performing a sequence of operations without unlocking the device, yielding a P...

CVE-2019-5217

There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 C00E61R1P8T8. An attacker could view the photos after a series of operations without unlocking the screen lock. Successful exploit could cause an information disclosure...

Input validation

Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361C636 versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and the application can read some process...

CVE-2019-5244

Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361C636 versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and the application can read some process...

CVE-2019-5244

Huawei Mate 9 Pro (LON-L29C) devices with software older than 8.0.0.361 (C636) have an information-disclosure vulnerability caused by lack of input validation. An attacker who tricks a user (who has root privileges) into installing a malicious app can read certain process information, leading to ...

CVE-2019-5244

Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361C636 versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and the application can read some process...