CVE-2020-0022

CVE-2020-0022 describes an out-of-bounds write in Android’s Bluetooth stack (packet_fragmenter.cc, reassemble_and_dispatch) that could enable remote code execution over Bluetooth without user interaction, affecting Android 8.0–10. Connected sources contain concrete exploitation analyses and PoCs ...

CVE-2021-22305

CVE-2021-22305 affects Huawei Mate 30 devices with firmware 10.1.0.126 (C00E125R5P3). The root cause is insufficient input validation in a module when handling messages, leading to a buffer overflow. Exploitation requires local access and crafted input to the vulnerable module, with the potential...

CVE-2020-1801

The CVE-2020-1801 entry describes an improper authentication vulnerability in Huawei Mate 30 Pro and Mate 30 smartphones. The issue arises from certain system function interfaces not sufficiently validating the caller’s identity in specific share scenarios, potentially leading to information disc...

CVE-2021-22306

CVE-2021-22306 describes an out-of-bounds read in Huawei Mate 30 (FW 10.0.0.182, build C00E180R6P2). A module does not strictly validate input when handling messages, allowing a local attacker to send malicious input via a specific module to trigger an out-of-bounds condition, potentially impacti...

CVE-2021-22307

CVE-2021-22307 affects Huawei Mate 30 smartphones with firmware 10.0.0.203 (C00E201R7P2). The issue is a weak algorithm that leaves protection for certain modules insufficient, allowing local attackers to compromise module integrity. CVSS indicates LOCAL access, low attack complexity, with HIGH i...

CVE-2021-22301

The CVE-2021-22301 issue affects Huawei Mate 30, specifically version 10.0.0.203 (C00E201R7P2). The root cause is a buffer overflow that can be triggered after an attacker gains root permission, enabling a vulnerable state on the device. Publicly referenced sources identify the affected device an...

CVE-2020-9119

CVE-2020-9119 corresponds to a Huawei smartphone privilege-escalation vulnerability reported by Huawei’s security advisory HWPSIRT-2020-00070. The issue involves a design defect that requires physical access to the device and allows elevation of privileges via execution of commands. Huawei states...

CVE-2021-22364

CVE-2021-22364 describes a denial-of-service vulnerability affecting Huawei Mate 30 devices (versions 10.1.0.126 and 10.1.0.152 for Mate 30 and Mate 30 5G). The issue arises from a module that does not adequately verify certain parameters, leading to exceptions and a potential DoS condition. Red ...

CVE-2020-9211

CVE-2020-9211 refers to an out-of-bounds read/write vulnerability in Huawei smartphones. The issue arises because a module does not sufficiently verify input, enabling denial of service through crafted configuration changes. Affected product: Huawei smartphone software; root cause: inadequate inp...

CVE-2020-9261

The CVE-2020-9261 entry applies to Huawei Mate 30 devices running versions earlier than 10.1.0.150 (C00E136R5P3). The vulnerability is a type confusion flaw where the system fails to properly check/transform certain variable types, enabling an attacker to trick the user into installing and runnin...

CVE-2020-9263

CVE-2020-9263 affects Huawei Mate 30 (before 10.1.0.150 C00E136R5P3) and Huawei P30 (before 10.1.0.160 C00E160R2P11). It is a use-after-free vulnerability where the system may reference freed memory; exploitation requires user to run a crafted app with normal privileges and could lead to code exe...

CVE-2020-9243

CVE-2020-9243 affects Huawei Mate 30 devices running versions earlier than 10.1.0.150 (C00E136R5P3). The issue is a denial-of-service vulnerability caused by insufficient recursion depth limiting in the system, which an attacker can trigger by convincing a user to install and run a malicious app....

CVE-2020-9262

Huawei Mate 30 devices running versions older than 10.1.0.150 (C00E136R5P3) are affected by a use-after-free vulnerability in the system that may reference memory after it has been freed. Successful exploitation requires tricking the user into launching a crafted application with high privileges,...

CVE-2020-1835

CVE-2020-1835 affects Huawei Mate 30 devices with versions earlier than 10.1.0.126 (C00E125R5P3). The vulnerability is an information disclosure caused by a logic judgment error in the Bluetooth handling subsystem, allowing an authenticated Bluetooth peer to craft interactions that lead to data l...

CVE-2020-9125

CVE-2020-9125 concerns Huawei Mate 30 devices prior to version 10.1.0.156 (C00E155R7P2). The issue is an out-of-bounds read caused by insufficient validation of a parameter in a crafted packet, allowing an attacker with certain permissions to trigger abnormal device behavior. Affected software: H...

CVE-2020-1839

Huawei Mate 30 devices running versions earlier than 10.1.0.150 (C00E136R5P3) are affected by a race-condition vulnerability. A timing window allows a concurrent process to modify certain pointer members, enabling code execution after tricking a user into running a crafted app with elevated privi...

CVE-2020-9129

CVE-2020-9129 affects Huawei Mate 30 devices running versions earlier than 10.1.0.159 (C00E159R7P2). The issue is an improper buffer operation caused by insufficient restrictions, enabling local attackers with high privileges to trigger a system heap overflow. The vulnerability is documented by H...