Huawei Mate 20 Firmware vulnerabilities

31 CVEs affecting Huawei Mate 20 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9082, published 2024-12-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-0022, published 2020-02-13. High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days. In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no…
CVE-2019-9506, published 2019-08-14. High severity, CVSS 8.1. EPSS: 2.7% chance of exploitation in the next 30 days. The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This…
CVE-2019-5251, published 2019-12-13. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into…
CVE-2020-9247, published 2020-12-07. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer…
CVE-2019-5225, published 2019-11-29. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A…
CVE-2018-7956, published 2018-12-04. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the…
CVE-2020-9113, published 2020-10-19. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft…
CVE-2019-5303, published 2020-04-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to…
CVE-2019-5302, published 2020-04-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to…
CVE-2020-9092, published 2020-10-19. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter…

Latest

CVE-2020-9082, published 2024-12-27. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the attacker should gain the permit to execute commands in ADB…
CVE-2020-9081, published 2024-12-27. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could…
CVE-2021-22440, published 2021-07-13. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or…
CVE-2020-9109, published 2020-10-12. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker…
CVE-2020-9083, published 2020-09-03. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker can enter a large amount of text on the phone. Due to…
CVE-2020-9103, published 2020-08-17. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI Mate 20 smartphones with 9.0.0.205(C00E205R2P1) have a logic error vulnerability. In a special scenario, the system does not properly process. As a result, attackers can perform a series of…
CVE-2020-9244, published 2020-08-11. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions…