Huawei Honor v10 Firmware vulnerabilities

7 CVEs affecting Huawei Honor v10 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1806, published 2020-04-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-5251, published 2019-12-13. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into…
CVE-2020-1806, published 2020-04-27. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters…
CVE-2020-1805, published 2020-04-27. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters…
CVE-2020-1804, published 2020-04-27. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters…
CVE-2020-1792, published 2020-02-28. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write vulnerability. The software…
CVE-2020-1785, published 2020-01-03. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should…
CVE-2019-5264, published 2019-12-13. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The…