Huawei Mate 10 Firmware vulnerabilities

9 CVEs affecting Huawei Mate 10 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9119, published 2020-12-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-7993, published 2018-07-31. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application,…
CVE-2017-17227, published 2018-03-09. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120(C212); The versions before ALP-L09 8.0.0.127(C900); The versions before ALP-L09…
CVE-2017-15311, published 2017-12-22. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B…
CVE-2019-5214, published 2019-06-06. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.167(C00E85R2P20T8). An attacker tricks the user into installing…
CVE-2019-5305, published 2019-06-06. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability. An attacker tricks a user into installing a malicious…
CVE-2019-5219, published 2019-06-06. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8). An attacker tricks the user into installing a malicious…
CVE-2020-1809, published 2020-05-29. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143(C00E143R2P4) have an information disclosure vulnerability. The attacker could wake up voice assistant then do a series of crafted…
CVE-2019-5264, published 2019-12-13. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The…
CVE-2020-9119, published 2020-12-24. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute…