Huawei Mate RS Firmware vulnerabilities

3 CVEs affecting Huawei Mate RS Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5230, published 2019-11-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-2215: Android Kernel Use-After-Free Vulnerability, published 2019-10-11. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 72.1% chance of exploitation in the next 30 days. A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require…
CVE-2019-5230, published 2019-11-13. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than NEO-AL00D…
CVE-2018-7929, published 2018-09-18. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei Mate RS smartphones with the versions before NEO-AL00D 8.1.0.167(C786) have a lock-screen bypass vulnerability. An attacker could unlock and use the phone through certain operations.