CVE-2019-5288

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters ...

CVE-2019-5287

P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters ...

CVE-2019-5287

CVE-2019-5287 affects Huawei P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193 (C00E190R2P1). The issue is an integer overflow caused by insufficient parameter validation in the camera program, potentially allowing an attacker who tricks the user into installing a malicious app with...

CVE-2019-5231

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.186C00E180R2P1 have an improper authorization vulnerability. The software incorrectly performs an authorization check when a user attempts to perform certain action. Successful exploit could allow the attacker to update a crafted package...

CVE-2019-5229

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could...

CVE-2019-5228

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...

Race condition

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...

Design/Logic Flaw

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193C00E190R2P1 have an insufficient verification vulnerability. The system does not verify certain parameters sufficiently, an attacker should connect to the phone and gain high privilege to launch the attack, successful exploit could...

CVE-2019-5231

The CVE-2019-5231 entry concerns Huawei P30 ELLE-AL00B devices with versions prior to 9.1.0.186 (C00E180R2P1). The vulnerability is an improper authorization issue where an unauthorized action check can be bypassed, potentially letting an attacker update a crafted software package. Affected produ...

CVE-2019-5229

CVE-2019-5229 affects Huawei P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1). The root cause is insufficient verification of certain parameters, allowing an attacker who can connect to the device to gain high privileges and potentially execute malicious code. Public s...

CVE-2019-5228

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193C00E190R1P21, Versions earlier than VOGUE-AL00A 9.1.0.193C00E190R1P12, Versions earlier than Princeton-AL10B 9.1.0.233C00E233R4P3 have a race condition vulnerability. The system does not...

CVE-2019-5228

The CVE-2019-5228 entry describes a race condition in the detection module of Huawei P30, P30 Pro, and Honor V20 devices prior to specific firmware versions (ELLE-AL00B 9.1.0.193, VOGUE-AL00A 9.1.0.193, Princeton-AL10B 9.1.0.233). The vulnerability arises from the system not locking certain funct...

Multiple Huawei Product Version Downgrade Vulnerabilities (CNVD-2019-30711)

Huawei P30 and others are products of Huawei, a Chinese company.Huawei P30 is a smartphone.Huawei P30 Pro is a smartphone.Huawei HiSuite is a cell phone assistant application for PCs.Huawei P30 Pro is a smartphone.Huawei P30 Pro is a smartphone.Huawei P30 Pro is a smartphone.Huawei P30 Pro is a...

Huawei P30, Mate 20 and P30 Pro Buffer Overflow Vulnerability

The Huawei P30, among others, is a smartphone from the Chinese company Huawei Huawei. A buffer overflow vulnerability exists in versions prior to Huawei P30 ELLE-AL00B 9.1.0.193 C00E190R1P21, Mate 20 Hima-AL00B 9.1.0.135 C00E200R2P1 and P30 Pro VOGUE-AL00A 9.1.0.193 A buffer overflow vulnerabilit...

Design/Logic Flaw

There is a man-in-the-middle MITM vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, and P30 Pro versions before VOG-AL00 9.1.0.162 C01E160R1P12/C01E160R2P1. When users establish connection and transfer data through Huawei Share, an attacker could...

Design/Logic Flaw

Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1 and P30 Pro versions before VOG-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, are exposed to a message replay vulnerability. For the sake of better compatibility, these devices implement a less strict check on th...

CVE-2019-5215

There is a man-in-the-middle MITM vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, and P30 Pro versions before VOG-AL00 9.1.0.162 C01E160R1P12/C01E160R2P1. When users establish connection and transfer data through Huawei Share, an attacker could...

CVE-2019-5307

The CVE-2019-5307 entry covers a message replay vulnerability in Huawei 4G LTE devices (P30 before ELE-AL00 9.1.0.162; P30 Pro before VOG-AL00 9.1.0.162) caused by a lax NAS COUNT check. An attacker can exploit a rogue base station to replay the GUTI reallocation command (and in some cases the Id...

CVE-2019-5215

There is a man-in-the-middle MITM vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162C01E160R1P12/C01E160R2P1, and P30 Pro versions before VOG-AL00 9.1.0.162 C01E160R1P12/C01E160R2P1. When users establish connection and transfer data through Huawei Share, an attacker could...

CVE-2019-5215

Summary: CVE-2019-5215 is a MITM vulnerability affecting Huawei Share on Huawei P30/P30 Pro devices (specific builds: ELE-AL00/VOG-AL00 with reported 9.1.0.162 variants). The issue allows an attacker who can observe adjacent-network traffic to sniff, spoof, and tamper Huawei Share data during con...