CVSS: 4.6EPSS: 0%CPEs: 2EXPL: 0CVE-2019-5217
https://notcve.org/view.php?id=CVE-2019-5217
04 Jun 2019 — There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 (C00E61R1P8T8). An attacker could view the photos after a series of operations without unlocking the screen lock. Successful exploit could cause an information disclosure condition. Existe una vulnerabilidad de revelación de información en las versiones de teléfonos Mate 9 Pro Huawei anteriores a LON-AL00B9.0.1.150 (C00E61R1P8T8). Un atacante podría ver las fotos después de una serie de... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190417-01-smartphone-en • CWE-307: Improper Restriction of Excessive Authentication Attempts •
CVSS: 4.6EPSS: 0%CPEs: 4EXPL: 0CVE-2018-7988
https://notcve.org/view.php?id=CVE-2018-7988
27 Nov 2018 — There is a Factory Reset Protection (FRP) bypass vulnerability on several smartphones. The system does not sufficiently verify the permission, an attacker uses a data cable to connect the smartphone to another smartphone and then perform a series of specific operations. Successful exploit could allow the attacker bypass the FRP protection. Hay una vulnerabilidad de omisión de FRP (Factory Reset Protection) en algunos smartphones. El sistema no verifica lo suficiente el permiso, por lo que un atacante puede ... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181114-01-smartphone-en • CWE-863: Incorrect Authorization •
CVSS: 7.2EPSS: 0%CPEs: 16EXPL: 0CVE-2017-17176
https://notcve.org/view.php?id=CVE-2017-17176
17 Oct 2018 — The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156, versions earlier before LON-CL00BC00B156, versions earlier before LON-DL00BC00B156, versions earlier before LON-TL00BC00B156 has a arbitrary memory read/write vulnerability due to the input parameters validation. An att... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170306-01-smartphone-en • CWE-787: Out-of-bounds Write •
CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0CVE-2018-7992
https://notcve.org/view.php?id=CVE-2018-7992
31 Jul 2018 — Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a malicious application which would send crafted parameters to the driver. Successful exploit could cause a denial of service condition. El controlador Mdapt de Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180725-01-dos-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.2EPSS: 0%CPEs: 4EXPL: 0CVE-2018-7940
https://notcve.org/view.php?id=CVE-2018-7940
10 May 2018 — Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129(SP2C00) and earlier versions than 8.0.0.129(SP2C01) have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations. Los smartphones de Huawei Mate 10 y Mate 10 Pro en versiones anteriores a la 8.0.0.129(SP2C00) y a la 8.0.0.129(SP2C01) tienen una vulnerabilidad de omisión de autenticación. Un atacante con altos privilegios obtie... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180509-01-mobile-en • CWE-287: Improper Authentication •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0CVE-2017-17279
https://notcve.org/view.php?id=CVE-2017-17279
09 Mar 2018 — The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343(C00) has an authentication bypass vulnerability due to the improper design of the module. An attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker bypass the authentication, the attacker can control the phone to sent short messages and make call within audio range to the phone. El módulo soundtrigger en los smartphone... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180307-01-smartphone-en •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2017-17225
https://notcve.org/view.php?id=CVE-2017-17225
09 Mar 2018 — The Near Field Communication (NFC) module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340a(C00) has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobile phone. Successful exploit could lead to system restart or arbitrary code execution. El módulo NFC (Near Field Communication) en los smartphones Huawei Mate 9 Pro con versiones anteriores a LON-AL00B 8.0.0.340... • http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180130-01-smartphone-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2017-17139
https://notcve.org/view.php?id=CVE-2017-17139
05 Mar 2018 — Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.334(C00) have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and application can exploit the vulnerability to get kernel date which may cause sensitive information leak. Los smartphones Huawei Mate 9 y Mate 9 pro con software en versiones anteriores a la MHA-AL00B 8.0.0.334(C0... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171213-04-smartphone-en • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.8EPSS: 0%CPEs: 8EXPL: 0CVE-2017-15311
https://notcve.org/view.php?id=CVE-2017-15311
22 Dec 2017 — The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL00B 8.0.0.334(C00) have a stack overflow vulnerability due to the lack of parameter validation. An attacker could send malicious packets to the smart phones within radio range by special wireless device, which leads stack overflow when the baseband module handles these packets. The attacker c... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171125-01-baseband-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 4EXPL: 0CVE-2017-15316 – Huawei Mate 9 Pro Mali Double Free Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2017-15316
22 Dec 2017 — The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which triggers double free and causes a system crash or arbitrary code execution. El controlador de unidad de procesamiento gráfico o GPU de los smartphones Mate 9de Huawei con software anter... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171201-01-smartphone-en • CWE-415: Double Free •