CVE-2019-2215

CVE-2019-2215 is a use-after-free in the Android binder driver (binder.c) that enables local privilege escalation from an app to the Linux kernel. The issue is local, with no user interaction required, and exploitation may lead to memory corruption, denial of service, or escalation per the cited ...

CVE-2020-0069

The CVE-2020-0069 issue affects MediaTek CMDQ driver ioctl handlers in Android kernel, where insufficient input sanitization and missing SELinux restrictions can cause an out-of-bounds write, enabling local privilege escalation without extra privileges or user interaction. Public material confirm...

CVE-2019-9506

CVE-2019-9506 affects Bluetooth KNOB (Key Negotiation of Bluetooth) by allowing nearby attackers to influence encryption key length during BR/EDR negotiation, enabling potential eavesdropping and ciphertext injection. Connected sources show this vulnerability being acknowledged by Apple across iO...

CVE-2019-5303

CVE-2019-5303 describes two denial-of-service vulnerabilities on Huawei smartphones: a rogue base station can send specially crafted TD-SCDMA messages, exploiting insufficient input validation of two parsed values to cause device abnormal. The connected documents reiterate the same impact and pro...

CVE-2019-5302

The CVE-2019-5302 entry concerns two denial-of-service vulnerabilities in Huawei smartphones triggered by specially crafted TD-SCDMA messages sent from a rogue base station. The issue arises from insufficient input validation during message parsing, potentially causing device abnormal behavior. T...

CVE-2019-19412

CVE-2019-19412 details a Factory Reset Protection (FRP) bypass on Huawei smartphones. An attacker using TalkBack mode can bypass FRP and install third-party apps by reconfiguring the device. Huawei’s security advisory HWPSIRT-2018-09212 and the linked Huawei PSIRT page note affected models and th...

CVE-2020-9069

CVE-2020-9069 describes an information leakage vulnerability in multiple Huawei products where an unauthenticated, adjacent attacker could decrypt data and leak information randomly. Affected devices include a wide range of Huawei consumer and networking devices (e.g., Anne-AL00, Berkeley-L09, CD...

CVE-2020-9239

CVE-2020-9239 describes an information-leak vulnerability in Huawei smartphones (various models and OS versions listed in the sources). The root cause is a design error described as a lack of input control in a module, enabling attackers to obtain information and potentially leak data. Public doc...