Huawei p9 Firmware vulnerabilities

20 CVEs affecting Huawei p9 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17171, published 2018-06-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-8150, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162…
CVE-2016-8761, published 2017-04-02. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows…
CVE-2016-8760, published 2017-04-02. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a heap overflow vulnerability, which…
CVE-2016-8759, published 2017-04-02. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows…
CVE-2016-8763, published 2017-04-02. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150…
CVE-2017-17319, published 2018-03-20. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. Huawei P9 smartphones with the versions before EVA-AL10C00B399SP02 have an information disclosure vulnerability. The software does not properly protect certain resource which can be accessed by…
CVE-2016-8757, published 2017-04-02. Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days. ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and…
CVE-2017-17171, published 2018-06-01. Medium severity, CVSS 4.2. EPSS: 0.5% chance of exploitation in the next 30 days. Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and…
CVE-2017-8148, published 2017-11-22. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. Audio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the…
CVE-2016-8776, published 2017-04-02. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some…

Latest

CVE-2017-8215, published 2017-11-22. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions…
CVE-2017-8214, published 2017-11-22. Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days. Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart phones with software of versions earlier than FRD-AL00C00B391, versions earlier than FRD-DL00C00B391, versions…
CVE-2017-2727, published 2017-11-22. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei P9 smart phones with software versions earlier before EVA-AL00C00B365, versions earlier before EVA-AL10C00B365,Versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365,…
CVE-2017-2713, published 2017-11-22. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370, versions earlier before VIE-L29C636B370…
CVE-2017-2705, published 2017-11-22. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365,…
CVE-2017-2703, published 2017-11-22. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier…