CVE-2020-0022

CVE-2020-0022 describes an out-of-bounds write in Android’s Bluetooth stack (packet_fragmenter.cc, reassemble_and_dispatch) that could enable remote code execution over Bluetooth without user interaction, affecting Android 8.0–10. Connected sources contain concrete exploitation analyses and PoCs ...

CVE-2020-1801

The CVE-2020-1801 entry describes an improper authentication vulnerability in Huawei Mate 30 Pro and Mate 30 smartphones. The issue arises from certain system function interfaces not sufficiently validating the caller’s identity in specific share scenarios, potentially leading to information disc...

CVE-2020-1795

The CVE-2020-1795 entry describes a logic-error vulnerability in Huawei smartphones (Mate 20 and Mate 30 Pro) where the Healthy Phone Use (Digital Balance) feature does not properly restrict certain operations, allowing bypass of the Digital Balance limit after a series of actions. Affected produ...

CVE-2020-1796

CVE-2020-1796 is an improper authorization vulnerability affecting Huawei Mate 20 (pre-10.0.0.188) and Mate 30 Pro (pre-10.0.0.203). The issue allows a low-privilege user to perform operations they should not be able to, due to an incorrect authorization check. Huawei has released updates to fix ...

CVE-2020-9119

CVE-2020-9119 corresponds to a Huawei smartphone privilege-escalation vulnerability reported by Huawei’s security advisory HWPSIRT-2020-00070. The issue involves a design defect that requires physical access to the device and allows elevation of privileges via execution of commands. Huawei states...

CVE-2020-1793

CVE-2020-1793 is an improper authentication vulnerability in Huawei smartphones where the applock fails to perform sufficient authentication in certain scenarios, potentially allowing access to data in locked apps. Affected devices include Huawei Mate 20 (before 10.0.0.188) and Huawei Mate 30 Pro...

CVE-2020-1794

The CVE-2020-1794 entry pertains to an improper authentication vulnerability in Huawei smartphones where the applock fails to enforce sufficient authentication in certain scenarios, potentially allowing access to data from locked apps. Affected devices include Huawei Mate 20 (versions earlier tha...

CVE-2020-9256

CVE-2020-9256 affects Huawei Mate 30 Pro and is caused by improper authorization where apps can misuse system services. Exploitation would require user interaction (malicious app installation) and could result in denial of audio service. Connected documents confirm the vulnerability's presence i...

CVE-2020-1838

Summary (CVE-2020-1838): Huawei Mate 30 Pro devices running versions before 10.1.0.150 (C00E136R5P3) are affected by an improper authentication vulnerability in which the device does not sufficiently validate a user face credential. An attacker could craft a facial credential to bypass authentica...