CVE-2019-5264

CVE-2019-5264 describes an information-disclosure vulnerability in several Huawei smartphones (Mate 10/Pro, Honor V10, Changxiang series, Y9 2018, Mate 9, etc.). The issue stems from improper handling of certain data related to apps protected by applock in a rare condition, enabling potential dis...

CVE-2017-15311

The CVE-2017-15311 issue affects Huawei baseband modules in Mate 10/Mate 10 Pro and Mate 9 series (prior to ALP-AL00 8.0.0.120/SP2C00, BLA-AL00 8.0.0.120/SP2C00, MHA-AL00B 8.0.0.334(C00), LON-AL00B 8.0.0.334(C00)). Root cause: lack of parameter validation leading to a stack overflow in the baseba...

CVE-2019-5219

CVE-2019-5219 corresponds to a double-free vulnerability in certain Huawei Mate10 smartphone drivers (pre‑ALP-AL00B 9.0.0.181). An attacker can entice the user to install a malicious app, causing multiple processes to operate the same resource concurrently and potentially leading to a denial of s...

CVE-2020-1809

CVE-2020-1809 affects Huawei Mate 10 devices with software versions earlier than 10.0.0.143 (C00E143R2P4). The issue is an information-disclosure vulnerability where an attacker can wake the voice assistant and perform crafted voice actions to read certain files without unlocking the phone. The v...

CVE-2019-5305

CVE-2019-5305 affects the image processing module on some Huawei Mate 10 devices (before ALP-L29 9.0.0.159). The root cause is a memory double-free vulnerability that can be triggered when a user installs a malicious app and it calls a specific API, potentially leading to a system crash. Public d...

CVE-2019-5214

CVE-2019-5214 describes a use-after-free vulnerability in a Huawei Mate10 driver component prior to ALP-AL00B 9.0.0.167 (C00E85R2P20T8). An attacker entices a user to install a malicious app, causing the driver to reference memory after it has been freed, which can lead to a denial-of-service con...

CVE-2020-9119

CVE-2020-9119 corresponds to a Huawei smartphone privilege-escalation vulnerability reported by Huawei’s security advisory HWPSIRT-2020-00070. The issue involves a design defect that requires physical access to the device and allows elevation of privileges via execution of commands. Huawei states...

CVE-2017-17227

CVE-2017-17227 describes an out-of-bounds memory access vulnerability in the GPU driver of Huawei Mate 10 smartphones. Affected builds include ALP-L09 before 8.0.0.120 (C212), before 8.0.0.127 (C900), and before 8.0.0.128 (402/C02/C109/C346/C432/C652). The issue arises from input parameter valida...

CVE-2018-7993

CVE-2018-7993 concerns a use-after-free vulnerability in the mediaserver component on Huawei Mate 10 devices running versions before ALP-AL00 8.1.0.311. An attacker can entice a user to install a malicious app, which causes mediaserver to reference memory after it has been freed, enabling arbitra...