Huawei p30 Firmware vulnerabilities

43 CVEs affecting Huawei p30 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9081, published 2024-12-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-0022, published 2020-02-13. High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days. In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no…
CVE-2019-9506, published 2019-08-14. High severity, CVSS 8.1. EPSS: 2.7% chance of exploitation in the next 30 days. The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This…
CVE-2019-5288, published 2019-11-13. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into…
CVE-2019-5287, published 2019-11-13. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into…
CVE-2019-5266, published 2019-12-23. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected…
CVE-2019-5251, published 2019-12-13. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into…
CVE-2020-9263, published 2020-10-19. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability. There is a condition exists that the…
CVE-2020-9247, published 2020-12-07. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer…
CVE-2019-5225, published 2019-11-29. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A…
CVE-2019-5265, published 2019-12-23. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender…

Latest

CVE-2020-9081, published 2024-12-27. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could…
CVE-2021-22399, published 2021-07-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. The Bluetooth function of some Huawei smartphones has a DoS vulnerability. Attackers can install third-party apps to send specific broadcasts, causing the Bluetooth module to crash. This…
CVE-2021-22331, published 2021-04-28. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious…
CVE-2021-22330, published 2021-04-28. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21) when processing a message. An unauthenticated attacker can exploit this vulnerability by…
CVE-2021-22327, published 2021-04-28. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, successful exploit could cause certain service…
CVE-2020-9203, published 2021-01-13. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. There is a resource management errors vulnerability in Huawei P30. Local attackers construct broadcast message for some application, causing this application to send this broadcast message and impact…
CVE-2020-9104, published 2020-08-21. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C432E22R2P5),Versions earlier than 10.1.0.126(C10E7R5P1),Versions earlier than…
CVE-2020-9244, published 2020-08-11. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than 10.1.0.270(C431E7R1P5),Versions earlier than 10.1.0.270(C635E3R1P5),Versions…