Huawei p30 Pro Firmware vulnerabilities

29 CVEs affecting Huawei p30 Pro Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9089, published 2024-12-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-0022, published 2020-02-13. High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days. In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no…
CVE-2019-9506, published 2019-08-14. High severity, CVSS 8.1. EPSS: 2.7% chance of exploitation in the next 30 days. The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This…
CVE-2020-9254, published 2020-07-17. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a logic…
CVE-2019-5251, published 2019-12-13. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into…
CVE-2020-9247, published 2020-12-07. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer…
CVE-2020-9123, published 2020-10-12. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160(C01E160R2P8) have a buffer overflow vulnerability. An attacker induces users to install malicious…
CVE-2019-5225, published 2019-11-29. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A…
CVE-2020-9257, published 2020-07-17. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a buffer…
CVE-2019-5228, published 2019-11-12. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), Versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P12), Versions…
CVE-2020-9076, published 2020-06-15. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than 10.1.0.135(C00E135R2P8), versions earlier than 10.1.0.135 have an improper…

Latest

CVE-2020-9089, published 2024-12-27. Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days. There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to…
CVE-2020-9081, published 2024-12-27. Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days. There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could…
CVE-2020-9109, published 2020-10-12. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart wearable device in certain specific scenario, the attacker…
CVE-2020-9108, published 2020-10-12. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends…
CVE-2020-9107, published 2020-10-12. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends…
CVE-2020-9106, published 2020-10-12. Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days. HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability. The system does not sufficiently validate certain pathname, successful exploit could allow the…
CVE-2020-9096, published 2020-08-21. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160(C00E160R2P8) have an out of bound read vulnerability. Some functions are lack of verification when they process some messages sent…
CVE-2020-9095, published 2020-08-21. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160(C00E160R2P8) has an integer overflow vulnerability. Some functions are lack of verification when they process some messages sent from…