CVE-2019-5264

CVE-2019-5264 describes an information-disclosure vulnerability in several Huawei smartphones (Mate 10/Pro, Honor V10, Changxiang series, Y9 2018, Mate 9, etc.). The issue stems from improper handling of certain data related to apps protected by applock in a rare condition, enabling potential dis...

CVE-2017-15311

The CVE-2017-15311 issue affects Huawei baseband modules in Mate 10/Mate 10 Pro and Mate 9 series (prior to ALP-AL00 8.0.0.120/SP2C00, BLA-AL00 8.0.0.120/SP2C00, MHA-AL00B 8.0.0.334(C00), LON-AL00B 8.0.0.334(C00)). Root cause: lack of parameter validation leading to a stack overflow in the baseba...

CVE-2020-1785

The CVE-2020-1785 issue affects Huawei/Mate 10 Pro, Honor V10/10 and Nova 4 smartphones. The root cause is a denial-of-service vulnerability where the system fails to properly check the status of a specific module during certain operations, enabling an attacker to trick a user into installing a m...

CVE-2018-7990

CVE-2018-7990 affects Huawei Mate 10 Pro smartphones running versions before 8.1.0.326(C00). The vulnerability enables an FRP bypass during the phone reset process, where an attacker could bypass the Find My Phone protection after a sequence of voice and keyboard actions. This is tied to Huawei’s...

CVE-2018-7934

CVE-2018-7934 affects some Huawei smartphones (pre-BLA-L29 8.0.0.145) where the system does not properly adapt to specific screen gestures, allowing a crafted installation of a malicious app to cause the foreground app to crash (DoS) after gesture input. The root cause is a DoS vulnerability rela...

CVE-2018-7936

CVE-2018-7936 affects Huawei Mate 10 Pro devices with firmware prior to BLA-L29 8.0.0.148 (C432). The FRP bypass occurs when reconfiguring FRP; an attacker can connect the phone to a PC and issue instructions to install a third‑party desktop and disable the boot wizard, effectively bypassing FRP ...

CVE-2018-7989

The CVE-2018-7989 entry affects Huawei Mate 10 Pro devices running before BLA-AL00B 8.1.0.326(C00). It describes an improper authentication vulnerability in the App Lock feature, where an attacker could directly change the lock password after a sequence of operations, enabling access to a previou...