Huawei Mate 30 Firmware vulnerabilities

17 CVEs affecting Huawei Mate 30 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9211, published 2024-12-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-0022, published 2020-02-13. High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days. In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no…
CVE-2020-9263, published 2020-10-19. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability. There is a condition exists that the…
CVE-2020-9262, published 2020-07-06. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the…
CVE-2020-9261, published 2020-07-06. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a type confusion vulnerability. The system does not properly check and transform the type of certain variable, the attacker…
CVE-2020-1801, published 2020-04-10. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario,…
CVE-2020-9243, published 2020-08-10. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a denial of service vulnerability. The system does not properly limit the depth of recursion, an attacker should trick the user…
CVE-2020-1835, published 2020-06-18. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability. A logic judgment error occurs when the system handling Bluetooth connections, an…
CVE-2020-9125, published 2020-12-29. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with specific permission can exploit this vulnerability by sending…
CVE-2020-9211, published 2024-12-27. High severity, CVSS 7.2. EPSS: 0.2% chance of exploitation in the next 30 days. There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can exploit this vulnerability by modifying some configuration…
CVE-2020-9119, published 2020-12-24. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute…

Latest

CVE-2021-22364, published 2021-05-27. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. There is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate 30 and 10.1.0.152(C00E136R7P2) of HUAWEI Mate 30 (5G) . A module does not verify certain parameters…
CVE-2021-22305, published 2021-02-06. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending…
CVE-2021-22306, published 2021-02-06. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending…
CVE-2021-22307, published 2021-02-06. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to…
CVE-2021-22301, published 2021-02-06. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker can exploit the vulnerability to cause buffer overflow.
CVE-2020-9129, published 2020-11-13. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictions, local attackers with high privileges can exploit the…