Huawei p20 Firmware vulnerabilities

13 CVEs affecting Huawei p20 Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9239, published 2020-09-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-2215: Android Kernel Use-After-Free Vulnerability, published 2019-10-11. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 72.1% chance of exploitation in the next 30 days. A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require…
CVE-2020-0022, published 2020-02-13. High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days. In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no…
CVE-2019-9506, published 2019-08-14. High severity, CVSS 8.1. EPSS: 2.7% chance of exploitation in the next 30 days. The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This…
CVE-2018-7987, published 2018-12-04. Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days. There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain…
CVE-2019-5212, published 2019-11-29. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing…
CVE-2019-5230, published 2019-11-13. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. P20 Pro, P20, Mate RS smartphones with versions earlier than Charlotte-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than Emily-AL00A 9.1.0.321(C00E320R1P1T8), versions earlier than NEO-AL00D…
CVE-2019-5303, published 2020-04-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to…
CVE-2019-5302, published 2020-04-27. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to…
CVE-2019-5211, published 2019-11-29. Medium severity, CVSS 5.7. EPSS: 0.3% chance of exploitation in the next 30 days. The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on…
CVE-2020-9239, published 2020-09-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions…

Latest

CVE-2020-9073, published 2020-05-15. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei P20 smartphones with versions earlier than 10.0.0.156(C00E156R1P4) have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation,…