Huawei Mate 20 Pro Firmware vulnerabilities

11 CVEs affecting Huawei Mate 20 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9080, published 2024-12-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-0022, published 2020-02-13. High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days. In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no…
CVE-2019-9506, published 2019-08-14. High severity, CVSS 8.1. EPSS: 2.7% chance of exploitation in the next 30 days. The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This…
CVE-2020-9247, published 2020-12-07. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer…
CVE-2019-5250, published 2019-12-13. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Mate 20 Pro smartphones with versions earlier than 9.1.0.135(C00E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege,…
CVE-2019-5303, published 2020-04-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to…
CVE-2019-5302, published 2020-04-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to…
CVE-2020-1786, published 2020-01-09. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI Mate 20 Pro smartphones versions earlier than 10.0.0.175(C00E69R3P8) have an improper authentication vulnerability. The software does not sufficiently validate the name of apk file in a…
CVE-2020-9244, published 2020-08-11. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions…
CVE-2021-22440, published 2021-07-13. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or…
CVE-2020-9080, published 2024-12-27. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful…

Latest

CVE-2020-9250, published 2024-12-20. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. There is an insufficient authentication vulnerability in some Huawei smart phone. An unauthenticated, local attacker can crafts software package to exploit this vulnerability. Due to insufficient…