Huawei Honor 9i Firmware vulnerabilities

4 CVEs affecting Huawei Honor 9i Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5252, published 2019-12-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-2215: Android Kernel Use-After-Free Vulnerability, published 2019-10-11. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 72.1% chance of exploitation in the next 30 days. A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require…
CVE-2019-5251, published 2019-12-13. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into…
CVE-2019-5264, published 2019-12-13. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The…
CVE-2019-5252, published 2019-12-14. Low severity, CVSS 3.5. EPSS: 0.2% chance of exploitation in the next 30 days. There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition.…