Huawei Nova 4 Firmware vulnerabilities

4 CVEs affecting Huawei Nova 4 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9117, published 2020-12-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-0069: Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability, published 2020-03-10. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 1.4% chance of exploitation in the next 30 days. In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local…
CVE-2019-9506, published 2019-08-14. High severity, CVSS 8.1. EPSS: 2.7% chance of exploitation in the next 30 days. The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This…
CVE-2020-1785, published 2020-01-03. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. The system does not properly check the status of certain module during certain operations, an attacker should…
CVE-2020-9117, published 2020-12-01. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. HUAWEI nova 4 versions earlier than 10.0.0.165(C01E34R2P4) and SydneyM-AL00 versions earlier than 10.0.0.165(C00E66R1P5) have an out-of-bounds read and write vulnerability. An attacker with specific…