![](/assets/img/cve_300x82_sin_bg.png)
CVE-2020-9119
https://notcve.org/view.php?id=CVE-2020-9119
24 Dec 2020 — There is a privilege escalation vulnerability on some Huawei smart phones due to design defects. The attacker needs to physically contact the mobile phone and obtain higher privileges, and execute relevant commands, resulting in the user's privilege promotion. Se presenta una vulnerabilidad de escalada de privilegios en algunos teléfonos inteligentes de Huawei debido a defectos de diseño. El atacante necesita contactar físicamente con el teléfono móvil y conseguir mayores privilegios, y ejecutar comand... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201202-01-smartphone-en •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2020-9256
https://notcve.org/view.php?id=CVE-2020-9256
17 Jul 2020 — Huawei Mate 30 Pro smartphones with versions earlier than 10.1.0.150(C00E136R5P3) have an improper authorization vulnerability. The system does not properly restrict the use of system service by applications, the attacker should trick the user into installing a malicious application, successful exploit could cause a denial of audio service. Los teléfonos inteligentes Huawei Mate 30 Pro con versiones anteriores a 10.1.0.150(C00E136R5P3), presentan una vulnerabilidad de autorización inapropiada. El sistema no... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-05-smartphone-en •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2020-1838
https://notcve.org/view.php?id=CVE-2020-1838
06 Jul 2020 — HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pass the authentication with the crafted credential. HUAWEI Mate 30 Pro con versiones anteriores a 10.1.0.150(C00E136R5P3), presenta una vulnerabilidad de autenticación inapropiada. El dispositivo no comprueba sufici... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-03-smartphone-en • CWE-287: Improper Authentication •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2020-1801
https://notcve.org/view.php?id=CVE-2020-1801
10 Apr 2020 — There is an improper authentication vulnerability in several smartphones. Certain function interface in the system does not sufficiently validate the caller's identity in certain share scenario, successful exploit could cause information disclosure. Affected product versions include:Mate 30 Pro versions Versions earlier than 10.0.0.205(C00E202R7P2);Mate 30 versions Versions earlier than 10.0.0.205(C00E201R7P2). Se presenta una vulnerabilidad de autenticación inapropiada en varios teléfonos inteligentes. Det... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200408-01-smartphone-en • CWE-287: Improper Authentication •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2020-1794
https://notcve.org/view.php?id=CVE-2020-1794
20 Mar 2020 — There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Se presenta una vulnerabilidad de autenticación inapropiada en varios teléfonos ... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-02-smartphone-en • CWE-287: Improper Authentication •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2020-1793
https://notcve.org/view.php?id=CVE-2020-1793
20 Mar 2020 — There is an improper authentication vulnerability in several smartphones. The applock does not perform a sufficient authentication in certain scenarios, successful exploit could allow the attacker to gain certain data of the application which is locked. Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Se presenta una vulnerabilidad de autenticación inapropiada en varios teléfonos ... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-02-smartphone-en • CWE-287: Improper Authentication •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2020-1796
https://notcve.org/view.php?id=CVE-2020-1796
20 Mar 2020 — There is an improper authorization vulnerability in several smartphones. The software incorrectly performs an authorization to certain user, successful exploit could allow a low privilege user to do certain operation which the user are supposed not to do.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Se presenta una vulnerabilidad de autorización inapropiada en varios teléfonos ... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-05-smartphone-en • CWE-863: Incorrect Authorization •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2020-1795
https://notcve.org/view.php?id=CVE-2020-1795
20 Mar 2020 — There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations.Affected product versions include:HUAWEI Mate 20 versions Versions earlier than 10.0.0.188(C00E74R3P8);HUAWEI Mate 30 Pro versions Versions earlier than 10.0.0.203(C00E202R7P2). Se presenta una vulnerabilidad de error lógico en varios teléfono... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-04-smartphone-en •
![](/assets/img/cve_300x82_sin_bg.png)
CVE-2020-0022 – Android Bluetooth Remote Denial of Service
https://notcve.org/view.php?id=CVE-2020-0022
13 Feb 2020 — In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715 En la función reassemble_and_dispatch del archivo packet_fragmenter.cc, es posible una escritura fuera de límites debido a un cálculo de... • https://packetstorm.news/files/id/156891 • CWE-682: Incorrect Calculation •