CVE-2019-9506

CVE-2019-9506 affects Bluetooth KNOB (Key Negotiation of Bluetooth) by allowing nearby attackers to influence encryption key length during BR/EDR negotiation, enabling potential eavesdropping and ciphertext injection. Connected sources show this vulnerability being acknowledged by Apple across iO...

CVE-2020-0022

CVE-2020-0022 describes an out-of-bounds write in Android’s Bluetooth stack (packet_fragmenter.cc, reassemble_and_dispatch) that could enable remote code execution over Bluetooth without user interaction, affecting Android 8.0–10. Connected sources contain concrete exploitation analyses and PoCs ...

CVE-2019-5220

CVE-2019-5220 describes a Factory Reset Protection (FRP) bypass on Huawei Mate 20 X, Mate 20 and Honor Magic 2. Affected versions are Mate 20 X prior to Ever-AL00B 9.0.0.200, Mate 20 prior to Hima-AL00B/Hima-TL00B 9.0.0.200, and Honor Magic 2 prior to Tony-AL00B/Tony-TL00B 9.0.0.182. Root cause: ...

CVE-2020-1797

CVE-2020-1797 affects Huawei Mate 20 devices running versions earlier than 10.0.0.185 (C00E74R3P8). The issue is an improper authorization in ADB mode where the system does not properly restrict certain operations, potentially allowing a user to bypass limits on digital balance functions. Public ...

CVE-2020-1791

CVE-2020-1791 affects Huawei Mate 20 smartphones with versions earlier than 10.0.0.185 (C00E74R3P8). The issue is described as an improper authorization vulnerability caused by a logic-judging error in certain scenarios, potentially allowing an attacker to switch to a third desktop after a sequen...

CVE-2020-1831

CVE-2020-1831 affects Huawei Mate 20 devices with versions older than 10.0.0.195 (SP31C00E74R3P8). The issue is an improper authorization in the digital balance feature, where the usage time of certain users is not sufficiently restricted; a successful exploit could allow a user to exceed the dig...

CVE-2019-5303

CVE-2019-5303 describes two denial-of-service vulnerabilities on Huawei smartphones: a rogue base station can send specially crafted TD-SCDMA messages, exploiting insufficient input validation of two parsed values to cause device abnormal. The connected documents reiterate the same impact and pro...

CVE-2019-5302

The CVE-2019-5302 entry concerns two denial-of-service vulnerabilities in Huawei smartphones triggered by specially crafted TD-SCDMA messages sent from a rogue base station. The issue arises from insufficient input validation during message parsing, potentially causing device abnormal behavior. T...

CVE-2020-1795

The CVE-2020-1795 entry describes a logic-error vulnerability in Huawei smartphones (Mate 20 and Mate 30 Pro) where the Healthy Phone Use (Digital Balance) feature does not properly restrict certain operations, allowing bypass of the Digital Balance limit after a series of actions. Affected produ...

CVE-2020-1840

CVE-2020-1840 affects Huawei Mate 20 smartphones with versions earlier than 10.0.0.175 (C00E70R3P8). The issue is an insufficient authentication vulnerability that allows a local, high-privilege attacker to execute a specific command, leading to potential information leakage and degraded device a...

CVE-2019-5251

CVE-2019-5251 describes a path-traversal vulnerability in several Huawei smartphones. The root cause is insufficient validation of certain pathnames by the system during operations such as installation, backup, and restoration of applications, which could enable information disclosure if a user i...

CVE-2020-9092

CVE-2020-9092 affects Huawei Mate 20 devices running versions earlier than 10.1.0.163 (C00E160R3P8). The issue is a JavaScript injection vulnerability where a module does not verify specific input, allowing attackers to bypass the filter mechanism and inject JavaScript, potentially compromising t...

CVE-2020-9113

Huawei Mate 20 devices with firmware older than 10.0.0.188 (C00E74R3P8) are affected by CVE-2020-9113 due to a buffer overflow in the Bluetooth module caused by insufficient input validation. An unauthenticated attacker can craft Bluetooth messages after pairing, potentially leading to code execu...

CVE-2020-9247

CVE-2020-9247 describes a buffer overflow in several Huawei smartphones caused by insufficient validation of a user-supplied configuration parameter, potentially leading to code execution. Affected models include HONOR 20 PRO, Mate 20/Mate 20 Pro/Mate 20 X, P30/P30 Pro, Hima-L29C, Laya-AL00EP, Pr...

CVE-2020-1796

CVE-2020-1796 is an improper authorization vulnerability affecting Huawei Mate 20 (pre-10.0.0.188) and Mate 30 Pro (pre-10.0.0.203). The issue allows a low-privilege user to perform operations they should not be able to, due to an incorrect authorization check. Huawei has released updates to fix ...

CVE-2020-9082

CVE-2020-9082 is described across multiple sources as an information-disclosure vulnerability in smartphones caused by a logic-judgment error that, if an attacker gains ADB access, enables operations on the device and access to data from apps protected by Applock. The core impact is information e...

CVE-2020-9081

CVE-2020-9081 affects Huawei smartphones with an improper authorization vulnerability that could allow bypassing app lock when performing a series of operations in a specific mode. The issue is associated with HWPSIRT-2019-12144. Public documents describe the affected product class as Huawei smar...

CVE-2019-5225

Huawei CVE-2019-5225 affects P30, Mate 20 and P30 Pro smartphones with software earlier than ELLE-AL00B 9.1.0.193, Hima-AL00B 9.1.0.135, and VOGUE-AL00A 9.1.0.193. It is a kernel-level buffer overflow caused by improper validation of a length parameter transported to the kernel by applications. E...

CVE-2020-1793

CVE-2020-1793 is an improper authentication vulnerability in Huawei smartphones where the applock fails to perform sufficient authentication in certain scenarios, potentially allowing access to data in locked apps. Affected devices include Huawei Mate 20 (before 10.0.0.188) and Huawei Mate 30 Pro...

CVE-2020-1794

The CVE-2020-1794 entry pertains to an improper authentication vulnerability in Huawei smartphones where the applock fails to enforce sufficient authentication in certain scenarios, potentially allowing access to data from locked apps. Affected devices include Huawei Mate 20 (versions earlier tha...

CVE-2020-9244

CVE-2020-9244 concerns Huawei smartphone firmware where multiple models (Mate 20, Mate 20 Pro, Mate 20 X, Mate 20 RS; P30/P30 Pro; Honor Magic2, Honor 20/20 Pro, HonorV20, etc.) are affected by an improper authentication vulnerability. The issue arises because the system does not properly sign ce...

CVE-2019-5227

CVE-2019-5227 affects Huawei P30, P30 Pro, Mate 20 and HiSuite. The issue is a downgrade vulnerability caused by insufficient validation of upgrade packages, allowing the device to be downgraded to older firmware. Affected conditions include ELLE-AL00B 9.1.0.193, VOGUE-AL00A 9.1.0.193, Hima-AL00B...

CVE-2020-1787

Summary : CVE-2020-1787 affects Huawei Mate 20 smartphones with firmware earlier than 9.1.0.139 (C00E133R3P1). The issue is an improper authentication due to a logic error that, in certain scenarios, could let a guest user gain access to the host user’s desktop instantly without unlocking the scr...

CVE-2020-9103

CVE-2020-9103 affects Huawei Mate 20 smartphones running 9.0.0.205 (C00E205R2P1). A logic error in a special scenario allows an attacker to perform operations to establish P2P connections that are rejected by the peer, impacting device availability. The issue is described across multiple sources;...

CVE-2018-7956

CVE-2018-7956 concerns Huawei VIP App (Malaysia) with versions before 4.0.5. The vulnerability enables brute-force attempts against the VIP App Web Services to disclose user information, an information-disclosure issue with a CVSS v3 base score of 5.3 (MEDIUM). The root cause is improper protecti...

CVE-2020-9109

CVE-2020-9109 affects several Huawei smartphones (e.g., Mate 20, Mate 20 X, P30 Pro, Laya-AL00EP, Tony-AL00B/TL00B) with an information-disclosure vulnerability caused by insufficient validation of the identity of a smart wearable device in specific scenarios. The attacker would need access to ce...

CVE-2021-22440

Public documents describe CVE-2021-22440 as a path-traversal vulnerability in several Huawei devices where external input is used to build a pathname under a restricted directory, potentially allowing access to files outside the intended area. Affected devices and firmware examples include Huawei...

CVE-2019-5226

Huawei CVE-2019-5226 concerns a version-downgrade flaw in smartphones: P30, P30 Pro, Mate 20, and related HiSuite components. The root cause is insufficient validation of upgrade packages, allowing the device system to be downgraded to older versions. Affected software versions include ELLE-AL00B...

CVE-2020-9083

CVE-2020-9083 affects Huawei Mate 20 smartphones running versions earlier than 10.1.0.163 (C00E160R3P8). The DoS arises from insufficient verification when the attacker enters a large amount of text, potentially impacting service availability. Connected documents corroborate the vulnerability des...

CVE-2020-1807

CVE-2020-1807 affects Huawei Mate 20 smartphones with versions earlier than 10.0.0.188 (C00E74R3P8). The vulnerability is an improper authorization that does not properly restrict a user’s modification of certain configuration files, potentially allowing an attacker to bypass the app lock after a...

CVE-2020-9252

CVE-2020-9252 affects HUAWEI Mate 20 (pre-10.1.0.160), Mate 20 X (pre-10.1.0.135), Mate 20 RS (pre-10.1.0.160) and Honor Magic2 (pre-10.1.0.160). The issue is a path traversal vulnerability caused by insufficient validation of certain pathname handling from a process, enabling a crafted path to w...