CVE-2019-5226

P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1, versions earlier than VOGUE-AL00A 9.1.0.193C00E190R2P1, versions earlier than Hima-AL00B 9.1.0.135C00E133R2P1 and HiSuite with versions earlier than HiSuite 9.1.0.305 have a version downgrade...

Huawei P30, Huawei P30 Pro and Honor Princeton-AL10B Conditional Competition Vulnerability

The Huawei P30, among others, is a smartphone from the Chinese company Huawei Huawei. A conditional contention vulnerability exists in the detection module in versions prior to Huawei P30 ELLE-AL00B 9.1.0.193 C00E190R1P21, P30 Pro VOGUE-AL00A 9.1.0.193 C00E190R1P12, and Honor Princeton-AL10B...

Huawei P30 ELLE-AL00B Improper Authorization Vulnerability

Huawei P30 is a smartphone from Chinese company Huawei Huawei. An improper authorization vulnerability exists in versions prior to Huawei P30 ELLE-AL00B 9.1.0.186 C00E180R2P1, which stems from the system failing to properly authorize a user action. An attacker could use this vulnerability to flas...

CVE-2019-5287

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters ...

CVE-2019-5288

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters ...

Integer overflow

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters ...

CVE-2019-5288

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters ...

CVE-2019-5288

CVE-2019-5288 affects Huawei P30 smartphones running versions before ELLE-AL00B 9.1.0.193. The issue is an integer overflow in the camera program caused by insufficient parameter validation. An attacker could lure a user to install a malicious app, gain root, and craft specific camera parameters ...

CVE-2019-5287

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters ...

CVE-2019-5287

CVE-2019-5287 affects Huawei P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193 (C00E190R2P1). The issue is an integer overflow caused by insufficient parameter validation in the camera program, potentially allowing an attacker who tricks the user into installing a malicious app with...

CVE-2019-5231

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186C00E180R2P1 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package...

CVE-2019-5228

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...

CVE-2019-5229

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could...

Race condition

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...

Design/Logic Flaw

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could...

CVE-2019-5231

The CVE-2019-5231 entry concerns Huawei P30 ELLE-AL00B devices with versions prior to 9.1.0.186 (C00E180R2P1). The vulnerability is an improper authorization issue where an unauthorized action check can be bypassed, potentially letting an attacker update a crafted software package. Affected produ...

CVE-2019-5229

CVE-2019-5229 affects Huawei P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1). The root cause is insufficient verification of certain parameters, allowing an attacker who can connect to the device to gain high privileges and potentially execute malicious code. Public s...

CVE-2019-5228

The CVE-2019-5228 entry describes a race condition in the detection module of Huawei P30, P30 Pro, and Honor V20 devices prior to specific firmware versions (ELLE-AL00B 9.1.0.193, VOGUE-AL00A 9.1.0.193, Princeton-AL10B 9.1.0.233). The vulnerability arises from the system not locking certain funct...

CVE-2019-5228

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...

Multiple Huawei Product Version Downgrade Vulnerabilities (CNVD-2019-30711)

Huawei P30 and others are products of Huawei, a Chinese company.Huawei P30 is a smartphone.Huawei P30 Pro is a smartphone.Huawei HiSuite is a cell phone assistant application for PCs.Huawei P30 Pro is a smartphone.Huawei P30 Pro is a smartphone.Huawei P30 Pro is a smartphone.Huawei P30 Pro is a...