CVE-2020-1878

Summary: CVE-2020-1878 affects Huawei smartphone OxfordS-AN00A. The issue is an improper authentication vulnerability where authentication to the target component is performed incorrectly when the device carries out an operation, enabling information leakage via a loaded malicious app. The affect...

CVE-2020-9235

CVE-2020-9235 affects Huawei HONOR 20 PRO devices with information disclosure due to a design-level input-control flaw in multiple firmware versions. Affected versions include various 10.x builds (e.g., 10.1.0.230/231/212/213/214/160/225, across several codenames), with exploitation leading to pa...

CVE-2021-22440

Public documents describe CVE-2021-22440 as a path-traversal vulnerability in several Huawei devices where external input is used to build a pathname under a restricted directory, potentially allowing access to files outside the intended area. Affected devices and firmware examples include Huawei...

CVE-2021-22400

CVE-2021-22400 affects Huawei OxfordS-AN00A smartphones (listed firmware versions such as 10.0.1.10, 10.0.1.105, 10.0.1.115, 10.0.1.123, 10.0.1.135, 10.0.1.152, 10.0.1.160, 10.0.1.167, 10.0.1.173, 10.0.1.178, 10.1.0.202). The root cause is insufficient input/parameter validation (missing paramete...