ByteOS

Product

ALP-AL00B

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R2P1T8)

Vendor

Product

ALP-L09

Versions

Affected

Versions earlier than 9.1.0.300(C432E4R1P9T8)

Vendor

Product

ALP-L29

Versions

Affected

Versions earlier than 9.1.0.315(C636E5R1P13T8)

Vendor

Product

BLA-L29C

Versions

Affected

Versions earlier than 9.1.0.321(C636E4R1P14T8)
Versions earlier than 9.1.0.330(C432E6R1P12T8)
Versions earlier than 9.1.0.302(C635E4R1P13T8)

Vendor

Product

Berkeley-AL20

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R2P1T8)

Vendor

Product

Berkeley-L09

Versions

Affected

Versions earlier than 9.1.0.350(C10E3R1P14T8)
Versions earlier than 9.1.0.351(C432E5R1P13T8)
Versions earlier than 9.1.0.350(C636E4R1P13T8)

Vendor

Product

Charlotte-L09C

Versions

Affected

Versions earlier than 9.1.0.311(C185E4R1P11T8)
Versions earlier than 9.1.0.345(C432E8R1P11T8)

Vendor

Product

Charlotte-L29C

Versions

Affected

Versions earlier than 9.1.0.325(C185E4R1P11T8)
Versions earlier than 9.1.0.335(C636E3R1P13T8)
Versions earlier than 9.1.0.345(C432E8R1P11T8)
Versions earlier than 9.1.0.336(C605E3R1P12T8)

Vendor

Product

Columbia-AL10B

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R1P1T8)

Vendor

Product

Columbia-L29D

Versions

Affected

Versions earlier than 9.1.0.350(C461E3R1P11T8)
Versions earlier than 9.1.0.350(C185E3R1P12T8)
Versions earlier than 9.1.0.350(C10E5R1P14T8)
Versions earlier than 9.1.0.351(C432E5R1P13T8)

Vendor

Product

Cornell-AL00A

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R1P1T8)

Vendor

Product

Cornell-L29A

Versions

Affected

Versions earlier than 9.1.0.328(C185E1R1P9T8)
Versions earlier than 9.1.0.328(C432E1R1P9T8)
Versions earlier than 9.1.0.330(C461E1R1P9T8)
Versions earlier than 9.1.0.328(C636E2R1P12T8)

Vendor

Product

Emily-L09C

Versions

Affected

Versions earlier than 9.1.0.336(C605E4R1P12T8)
Versions earlier than 9.1.0.311(C185E2R1P12T8)
Versions earlier than 9.1.0.345(C432E10R1P12T8)

Vendor

Product

Emily-L29C

Versions

Affected

Versions earlier than 9.1.0.311(C605E2R1P12T8)
Versions earlier than 9.1.0.311(C636E7R1P13T8)
Versions earlier than 9.1.0.311(C432E7R1P11T8)

Vendor

Product

Ever-L29B

Versions

Affected

Versions earlier than 9.1.0.311(C185E3R3P1)

Vendor

Product

HUAWEI Mate 20

Versions

Affected

Versions earlier than 9.1.0.131(C00E131R3P1)

Vendor

Product

HUAWEI Mate 20 Pro

Versions

Affected

Versions earlier than 9.1.0.310(C185E10R2P1)

Vendor

Product

HUAWEI Mate 20 RS

Versions

Affected

Versions earlier than 9.1.0.135(C786E133R3P1)

Vendor

Product

HUAWEI Mate 20 X

Versions

Affected

Versions earlier than 9.1.0.135(C00E133R2P1)

Vendor

Product

HUAWEI P20

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R1P1T8)

Vendor

Product

HUAWEI P20 Pro

Versions

Affected

Versions earlier than 9.1.0.333(C00E333R1P1T8)

Vendor

Product

HUAWEI P30

Versions

Affected

Versions earlier than 9.1.0.193

Vendor

Product

HUAWEI P30 Pro

Versions

Affected

Versions earlier than 9.1.0.186(C00E180R2P1)

Vendor

Product

HUAWEI Y9 2019

Versions

Affected

Versions earlier than 9.1.0.220(C605E3R1P1T8)

Vendor

Product

HUAWEI nova lite 3

Versions

Affected

Versions earlier than 9.1.0.305(C635E8R2P2)

Vendor

Product

Honor 10 Lite

Versions

Affected

Versions earlier than 9.1.0.283(C605E8R2P2)

Vendor

Product

Honor 8X

Versions

Affected

Versions earlier than 9.1.0.221(C461E2R1P1T8)

Vendor

Product

Honor View 20

Versions

Affected

Versions earlier than 9.1.0.238(C432E1R3P1)

Vendor

Product

Jackman-L22

Versions

Affected

Versions earlier than 9.1.0.247(C636E2R4P1T8)

Vendor

Product

Paris-L21B

Versions

Affected

Versions earlier than 9.1.0.331(C432E1R1P2T8)

Vendor

Product

Paris-L21MEB

Versions

Affected

Versions earlier than 9.1.0.331(C185E4R1P3T8)

Vendor

Product

Paris-L29B

Versions

Affected

Versions earlier than 9.1.0.331(C636E1R1P3T8)

Vendor

Product

Sydney-AL00

Versions

Affected

Versions earlier than 9.1.0.212(C00E62R1P7T8)

Vendor

Product

Sydney-L21

Versions

Affected

Versions earlier than 9.1.0.215(C432E1R1P1T8)
Versions earlier than 9.1.0.213(C185E1R1P1T8)

Vendor

Product

Sydney-L21BR

Versions

Affected

Versions earlier than 9.1.0.213(C185E1R1P2T8)

Vendor

Product

Sydney-L22

Versions

Affected

Versions earlier than 9.1.0.258(C636E1R1P1T8)

Vendor

Product

Sydney-L22BR

Versions

Affected

Versions earlier than 9.1.0.258(C636E1R1P1T8)

Vendor

Product

SydneyM-AL00

Versions

Affected

Versions earlier than 9.1.0.228(C00E78R1P7T8)

Vendor

Product

SydneyM-L01

Versions

Affected

Versions earlier than 9.1.0.215(C782E2R1P1T8)
Versions earlier than 9.1.0.213(C185E1R1P1T8)
Versions earlier than 9.1.0.270(C432E3R1P1T8)

Vendor

Product

SydneyM-L03

Versions

Affected

Versions earlier than 9.1.0.217(C605E1R1P1T8)

Vendor

Product

SydneyM-L21

Versions

Affected

Versions earlier than 9.1.0.221(C461E1R1P1T8)
Versions earlier than 9.1.0.215(C432E4R1P1T8)

Vendor

Product

SydneyM-L22

Versions

Affected

Versions earlier than 9.1.0.259(C185E1R1P2T8)
Versions earlier than 9.1.0.220(C635E1R1P2T8)
Versions earlier than 9.1.0.216(C569E1R1P1T8)

Vendor

Product

SydneyM-L23

Versions

Affected

Versions earlier than 9.1.0.226(C605E2R1P1T8)

Vendor

Product

Yale-L21A

Versions

Affected

Versions earlier than 9.1.0.154(C432E2R3P2)
Versions earlier than 9.1.0.154(C461E2R2P1)
Versions earlier than 9.1.0.154(C636E2R2P1)

Vendor

Product

Honor 20

Versions

Affected

Versions earlier than 9.1.0.152(C00E150R5P1)

Vendor

Product

Honor Magic2

Versions

Affected

Versions earlier than 10.0.0.187

Vendor

Product

Honor V20

Versions

Affected

Versions earlier than 9.1.0.234(C00E234R4P3)

Problem Types

Type	CWE ID	Description
text	N/A	Denial of Service

Type: text

CWE ID: N/A

Description: Denial of Service

References

Hyperlink	Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en	x_refsource_CONFIRM

Hyperlink: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en	x_refsource_CONFIRM x_transferred

Hyperlink: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@huawei.com

Published At:27 Apr, 2020 | 20:15

Updated At:05 May, 2020 | 17:37

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.3	MEDIUM	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary	2.0	2.9	LOW	AV:A/AC:M/Au:N/C:N/I:N/A:P

Type: Primary

Version: 3.1

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Type: Primary

Version: 2.0

Base score: 2.9

Base severity: LOW

Vector:

AV:A/AC:M/Au:N/C:N/I:N/A:P

CPE Matches

cpe:2.3:h:huawei:alp-al00b:-:*:*:*:*:*:*:*

>>alp-al00b>>-

cpe:2.3:o:huawei:alp-al00b_firmware:*:*:*:*:*:*:*:*

>>alp-al00b_firmware>>Versions before 9.1.0.333\(c00e333r2p1t8\)(exclusive)

cpe:2.3:h:huawei:alp-l09:-:*:*:*:*:*:*:*

>>alp-l09>>-

cpe:2.3:o:huawei:alp-l09_firmware:*:*:*:*:*:*:*:*

>>alp-l09_firmware>>Versions before 9.1.0.300\(c432e4r1p9t8\)(exclusive)

cpe:2.3:h:huawei:alp-l29:-:*:*:*:*:*:*:*

>>alp-l29>>-

cpe:2.3:o:huawei:alp-l29_firmware:*:*:*:*:*:*:*:*

>>alp-l29_firmware>>Versions before 9.1.0.315\(c636e5r1p13t8\)(exclusive)

cpe:2.3:h:huawei:bla-l29c:-:*:*:*:*:*:*:*

>>bla-l29c>>-

cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:*

>>bla-l29c_firmware>>Versions before 9.1.0.321\(c636e4r1p14t8\)(exclusive)

cpe:2.3:h:huawei:bla-l29c:-:*:*:*:*:*:*:*

>>bla-l29c>>-

cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:*

>>bla-l29c_firmware>>Versions before 9.1.0.330\(c432e6r1p12t8\)(exclusive)

cpe:2.3:h:huawei:bla-l29c:-:*:*:*:*:*:*:*

>>bla-l29c>>-

cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:*

>>bla-l29c_firmware>>Versions before 9.1.0.302\(c635e4r1p13t8\)(exclusive)

cpe:2.3:h:huawei:berkeley-al20:-:*:*:*:*:*:*:*

>>berkeley-al20>>-

cpe:2.3:o:huawei:berkeley-al20_firmware:*:*:*:*:*:*:*:*

>>berkeley-al20_firmware>>Versions before 9.1.0.333\(c00e333r2p1t8\)(exclusive)

cpe:2.3:h:huawei:berkeley-l09:-:*:*:*:*:*:*:*

>>berkeley-l09>>-

cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:*

>>berkeley-l09_firmware>>Versions before 9.1.0.350\(c10e3r1p14t8\)(exclusive)

cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:*

>>berkeley-l09_firmware>>Versions before 9.1.0.351\(c432e5r1p13t8\)(exclusive)

cpe:2.3:h:huawei:berkeley-l09:-:*:*:*:*:*:*:*

>>berkeley-l09>>-

cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:*

>>berkeley-l09_firmware>>Versions before 9.1.0.350\(c636e4r1p13t8\)(exclusive)

cpe:2.3:h:huawei:berkeley-l09:-:*:*:*:*:*:*:*

>>berkeley-l09>>-

cpe:2.3:o:huawei:charlotte-l09c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l09c_firmware>>Versions before 9.1.0.311\(c185e4r1p11t8\)(exclusive)

cpe:2.3:h:huawei:charlotte-l09c:-:*:*:*:*:*:*:*

>>charlotte-l09c>>-

cpe:2.3:o:huawei:charlotte-l09c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l09c_firmware>>Versions before 9.1.0.345\(c432e8r1p11t8\)(exclusive)

cpe:2.3:h:huawei:charlotte-l09c:-:*:*:*:*:*:*:*

>>charlotte-l09c>>-

cpe:2.3:o:huawei:charlotte-l29c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l29c_firmware>>Versions before 9.1.0.325\(c185e4r1p11t8\)(exclusive)

cpe:2.3:o:huawei:charlotte-l29c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l29c_firmware>>Versions before 9.1.0.335\(c636e3r1p13t8\)(exclusive)

cpe:2.3:o:huawei:charlotte-l29c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l29c_firmware>>Versions before 9.1.0.345\(c432e8r1p11t8\)(exclusive)

cpe:2.3:o:huawei:charlotte-l29c_firmware:*:*:*:*:*:*:*:*

>>charlotte-l29c_firmware>>Versions before 9.1.0.336\(c605e3r1p12t8\)(exclusive)

cpe:2.3:o:huawei:columbia-al10b_firmware:*:*:*:*:*:*:*:*

>>columbia-al10b_firmware>>Versions before 9.1.0.333\(c00e333r1p1t8\)(exclusive)

cpe:2.3:h:huawei:columbia-al10b:-:*:*:*:*:*:*:*

>>columbia-al10b>>-

cpe:2.3:o:huawei:columbia-l29d_firmware:*:*:*:*:*:*:*:*

>>columbia-l29d_firmware>>Versions before 9.1.0.350\(c461e3r1p11t8\)(exclusive)

cpe:2.3:o:huawei:columbia-l29d_firmware:*:*:*:*:*:*:*:*

>>columbia-l29d_firmware>>Versions before 9.1.0.350\(c185e3r1p12t8\)(exclusive)

cpe:2.3:o:huawei:columbia-l29d_firmware:*:*:*:*:*:*:*:*

>>columbia-l29d_firmware>>Versions before 9.1.0.350\(c10e5r1p14t8\)(exclusive)

cpe:2.3:o:huawei:columbia-l29d_firmware:*:*:*:*:*:*:*:*

>>columbia-l29d_firmware>>Versions before 9.1.0.351\(c432e5r1p13t8\)(exclusive)

cpe:2.3:o:huawei:cornell-al00a_firmware:*:*:*:*:*:*:*:*

>>cornell-al00a_firmware>>Versions before 9.1.0.333\(c00e333r1p1t8\)(exclusive)

cpe:2.3:h:huawei:cornell-al00a:-:*:*:*:*:*:*:*

>>cornell-al00a>>-

cpe:2.3:o:huawei:cornell-l29a_firmware:*:*:*:*:*:*:*:*

>>cornell-l29a_firmware>>Versions before 9.1.0.328\(c185e1r1p9t8\)(exclusive)

cpe:2.3:h:huawei:cornell-l29a:-:*:*:*:*:*:*:*

>>cornell-l29a>>-

cpe:2.3:o:huawei:cornell-l29a_firmware:*:*:*:*:*:*:*:*

>>cornell-l29a_firmware>>Versions before 9.1.0.328\(c432e1r1p9t8\)(exclusive)

cpe:2.3:h:huawei:cornell-l29a:-:*:*:*:*:*:*:*

>>cornell-l29a>>-

cpe:2.3:o:huawei:cornell-l29a_firmware:*:*:*:*:*:*:*:*

>>cornell-l29a_firmware>>Versions before 9.1.0.330\(c461e1r1p9t8\)(exclusive)

cpe:2.3:h:huawei:cornell-l29a:-:*:*:*:*:*:*:*

>>cornell-l29a>>-

Weaknesses

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov

CWE ID: CWE-20

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en	psirt@huawei.com	Vendor Advisory

Hyperlink: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en

Source: psirt@huawei.com

Resource:

Vendor Advisory

Similar CVEs

0Records found

CVE-2019-5302

Matching Score-10

Assigner-Huawei Technologies

Matching Score-10

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.06% / 20.26%

7 Day CHG~0.00%

Published-27 Apr, 2020 | 19:50

Updated-04 Aug, 2024 | 19:54

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Product-p20_pro_firmware sydney-l22 honor_v20_firmware charlotte-l29c columbia-l29d_firmware sydney-l21_firmware sydney-l21 y9_2019 sydneym-l23_firmware bla-l29c ever-l29b_firmware emily-l29c_firmware p30_pro_firmware honor_20 mate_20_pro honor_view_20 mate_20_x jackman-l22_firmware p20 nova_lite_3 honor_magic2 paris-l29b_firmware honor_magic2_firmware sydneym-l03_firmware p30_pro columbia-al10b_firmware cornell-al00a sydney-l22br alp-l29_firmware sydney-l22br_firmware berkeley-l09_firmware alp-l09 emily-l09c_firmware p30_firmware yale-l21a_firmware honor_10_lite_firmware honor_v20 y9_2019_firmware sydneym-l21_firmware berkeley-al20 alp-l09_firmware mate_20 emily-l09c cornell-al00a_firmware sydneym-l01 cornell-l29a sydney-l21br_firmware sydneym-l22 honor_view_20_firmware paris-l29b paris-l21b_firmware sydneym-l22_firmware sydney-al00_firmware sydneym-l01_firmware berkeley-al20_firmware ever-l29b columbia-l29d columbia-al10b sydneym-l03 jackman-l22 honor_10_lite paris-l21meb_firmware paris-l21b sydneym-l23 yale-l21a charlotte-l09c nova_lite_3_firmware alp-l29 p20_firmware sydney-l22_firmware berkeley-l09 p20_pro sydney-al00 mate_20_rs_firmware honor_20_firmware sydneym-l21 mate_20_x_firmware charlotte-l29c_firmware alp-al00b_firmware paris-l21meb sydneym-al00_firmware sydney-l21br mate_20_firmware p30 mate_20_rs cornell-l29a_firmware bla-l29c_firmware sydneym-al00 charlotte-l09c_firmware mate_20_pro_firmware honor_8x_firmware honor_8x alp-al00b emily-l29c Paris-L21MEB SydneyM-L03 SydneyM-L21 HUAWEI Mate 20 Pro BLA-L29C ALP-L09 HUAWEI P20 Pro Ever-L29B SydneyM-L23 Cornell-AL00A Paris-L29B Emily-L09C Honor 8X SydneyM-L22 Cornell-L29A Columbia-L29D Charlotte-L09C Sydney-AL00 Honor V20 Honor Magic2 HUAWEI Mate 20 RS SydneyM-L01 HUAWEI P30 Berkeley-AL20 Sydney-L21 Sydney-L22 HUAWEI nova lite 3 Honor 20 Sydney-L21BR Paris-L21B HUAWEI Mate 20 X Berkeley-L09 SydneyM-AL00 Honor 10 Lite Jackman-L22 ALP-AL00B Sydney-L22BR HUAWEI P20 Columbia-AL10B ALP-L29 HUAWEI P30 Pro Honor View 20 HUAWEI Y9 2019 Yale-L21A Emily-L29C Charlotte-L29C HUAWEI Mate 20

CWE ID-CWE-20

Improper Input Validation

CVE-2020-1837

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.05% / 14.96%

7 Day CHG~0.00%

Published-06 Jul, 2020 | 17:27

Updated-04 Aug, 2024 | 06:53

ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal service condition.

Product-changxiang_8_plus changxiang_8_plus_firmware ChangXiang 8 Plus

CVE-2017-17282

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-3.1||LOW

EPSS-0.05% / 15.55%

7 Day CHG~0.00%

Published-09 Mar, 2018 | 21:00

Updated-05 Aug, 2024 | 20:44

SCCP (Signalling Connection Control Part) module in Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 has a buffer overflow vulnerability. An attacker has to find a way to send malformed packets to the affected products repeatedly. Due to insufficient input validation, successful exploit may cause some service abnormal.

Product-te60_firmware te30_firmware dp300 rp200 te40_firmware te60 dp300_firmware te40 te30 te50_firmware te50 rp200_firmware DP300, RP200, TE30, TE40, TE50, TE60

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-4087

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-0.83% / 73.54%

7 Day CHG~0.00%

Published-23 May, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of service or execute arbitrary code via crafted DNS packets.

Product-s12700 s12700_firmware s5700 s5700_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2018-7934

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 21.57%

7 Day CHG~0.00%

Published-31 Jul, 2018 | 14:00

Updated-05 Aug, 2024 | 06:37

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users make specific screen gestures.

Product-mate_10_pro mate_10_pro_firmware Mate 10 Pro

CWE ID-CWE-20

Improper Input Validation

CVE-2018-7935

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-1.65% / 81.22%

7 Day CHG~0.00%

Published-10 Feb, 2023 | 11:55

Updated-24 Mar, 2025 | 15:15

There is a vulnerability in 21.328.01.00.00 version of the E5573Cs-322. Remote attackers could exploit this vulnerability to make the network where the E5573Cs-322 is running temporarily unavailable.

Product-e5573cs-322 e5573cs-322_firmware E5573Cs-322

CWE ID-CWE-20

Improper Input Validation

CVE-2018-7906

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 21.57%

7 Day CHG~0.00%

Published-12 Sep, 2018 | 15:00

Updated-05 Aug, 2024 | 06:37

Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful exploitation can cause the smartphone black screen until restarting the phone.

Product-leland-al00_firmware lleland-al00a_firmware lleland-al00a leland-al00 Leland-AL00, Leland-AL00A

CWE ID-CWE-20

Improper Input Validation

CVE-2018-7922

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.8||HIGH

EPSS-0.12% / 32.20%

7 Day CHG~0.00%

Published-12 Sep, 2018 | 15:00

Updated-05 Aug, 2024 | 06:37

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.

Product-alp-l09_firmware alp-l09 ALP-L09

CWE ID-CWE-20

Improper Input Validation

CVE-2018-7923

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.8||HIGH

EPSS-0.12% / 32.20%

7 Day CHG~0.00%

Published-12 Sep, 2018 | 15:00

Updated-05 Aug, 2024 | 06:37

Product-alp-l09_firmware alp-l09 ALP-L09

CWE ID-CWE-20

Improper Input Validation

CVE-2020-9254

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.8||HIGH

EPSS-0.17% / 38.91%

7 Day CHG~0.00%

Published-17 Jul, 2020 | 22:36

Updated-04 Aug, 2024 | 10:19

HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a logic check error vulnerability. A logic error occurs when the software checking the size of certain parameter, the attacker should trick the user into installing a malicious application, successful exploit may cause code execution.

Product-p30_pro p30_pro_firmware HUAWEI P30 Pro

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8331

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.4||HIGH

EPSS-0.13% / 33.71%

7 Day CHG~0.00%

Published-11 Jan, 2016 | 15:00

Updated-12 Apr, 2025 | 10:46

The Operation and Maintenance Unit (OMU) in Huawei VCN500 with software before V100R002C00SPC200 does not properly invalidate the session ID when an "abnormal exit" occurs, which allows remote attackers to conduct replay attacks via the session ID.

Product-vcn500 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8225

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.47%

7 Day CHG~0.00%

Published-08 Jan, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

The Joint Photographic Experts Group Processing Unit (JPU) driver in Huawei ALE smartphones with software before ALE-UL00C00B220 and ALE-TL00C01B220 and GEM-703L smartphones with software before V100R001C233B111 allows remote attackers to cause a denial of service (crash) via a crafted application with the system or camera permission, a different vulnerability than CVE-2015-8226.

Product-ale_firmware gem-703l_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7740

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 3.20%

7 Day CHG~0.00%

Published-13 Apr, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) via vectors involving an application that passes crafted input to the GPU driver.

Product-p7_firmware p8_ale-ul00_firmware p7 p8_ale-ul00 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8229

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-4||MEDIUM

EPSS-0.19% / 40.64%

7 Day CHG~0.00%

Published-24 Nov, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

Huawei eSpace U2980 unified gateway with software before V100R001C10 and U2990 with software before V200R001C10 allow remote authenticated users to cause a denial of service via crafted signaling packets from a registered device.

Product-espace_firmware espace_unified_gateway_u2980 espace_unified_gateway_u2990 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8305

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 21.57%

7 Day CHG~0.00%

Published-07 Apr, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege.

Product-p7_firmware p7 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8084

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.1||HIGH

EPSS-0.36% / 57.23%

7 Day CHG~0.00%

Published-07 Dec, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DHCP Snooping" is enabled and either "option82 insert" or "option82 rebuild" is enabled on an interface, allow remote attackers to cause a denial of service (reboot) via crafted DHCP packets.

Product-unified_security_gateway_firmware usg5100 usg2100 usg5500 usg2200 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8227

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.5||HIGH

EPSS-0.16% / 37.43%

7 Day CHG~0.00%

Published-24 Nov, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

The built-in web server in Huawei VP9660 multi-point control unit with software before V200R001C30SPC700 allows remote administrators to obtain sensitive information or cause a denial of service via a crafted message.

Product-vp_9660_firmware vp9660 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8265

Matching Score-6

Assigner-CERT/CC

Matching Score-6

Assigner-CERT/CC

CVSS Score-7.5||HIGH

EPSS-0.57% / 67.57%

7 Day CHG~0.00%

Published-01 Feb, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

Huawei Mobile WiFi E5151 routers with software before E5151s-2TCPU-V200R001B146D27SP00C00 and E5186 routers with software before V200R001B310D01SP00C00 allow DNS query packets using the static source port, which makes it easier for remote attackers to spoof responses via unspecified vectors.

Product-e5151 e5186 e5151_firmware e5186_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7847

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.02% / 3.87%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei MBB (Mobile Broadband) product E3272s with software versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00 has a Denial of Service (DoS) vulnerability. An attacker could send a malicious packet to the Common Gateway Interface (CGI) of a target device and make it fail while setting the port attribute, which causes a DoS attack.

Product-e3272s_firmware e3272s E3272s Versions earlier than E3272s-153TCPU-V200R002B491D09SP00C00

CWE ID-CWE-20

Improper Input Validation

CVE-2022-48356

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.08% / 25.19%

7 Day CHG~0.00%

Published-27 Mar, 2023 | 00:00

Updated-19 Feb, 2025 | 19:15

The facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition.

CWE ID-CWE-20

Improper Input Validation

CVE-2025-54636

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-4.4||MEDIUM

EPSS-0.01% / 0.67%

7 Day CHG~0.00%

Published-06 Aug, 2025 | 02:32

Updated-11 Aug, 2025 | 15:20

Issue of buffer overflow caused by insufficient data verification in the kernel drop detection module. Impact: Successful exploitation of this vulnerability may affect availability.

Product-emui harmonyos EMUI HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8226

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.47%

7 Day CHG~0.00%

Published-08 Jan, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Product-ale_firmware gem-703l_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37017

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.90%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:24

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8678

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.47%

7 Day CHG~0.00%

Published-24 Mar, 2017 | 14:00

Updated-20 Apr, 2025 | 01:37

The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows remote attackers to cause a denial of service (crash) via a crafted application.

Product-mate_s_firmware p8 mate_s p8_firmware n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37047

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.25% / 48.39%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 15:45

Updated-04 Aug, 2024 | 01:09

There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause some services to restart.

Product-magic_ui emui Magic UI EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2025-54642

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.7||MEDIUM

EPSS-0.01% / 0.67%

7 Day CHG~0.00%

Published-06 Aug, 2025 | 02:44

Updated-11 Aug, 2025 | 15:23

Issue of buffer overflow caused by insufficient data verification in the kernel gyroscope module. Impact: Successful exploitation of this vulnerability may affect availability.

Product-emui harmonyos EMUI HarmonyOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37039

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.05% / 15.89%

7 Day CHG~0.00%

Published-08 Dec, 2021 | 14:11

Updated-04 Aug, 2024 | 01:09

There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause Bluetooth DoS.

Product-magic_ui harmonyos emui Magic UI HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37081

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.18% / 40.11%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:04

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2025-54614

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.2||MEDIUM

EPSS-0.01% / 1.54%

7 Day CHG~0.00%

Published-06 Aug, 2025 | 01:24

Updated-12 Aug, 2025 | 16:31

Input verification vulnerability in the home screen module. Impact: Successful exploitation of this vulnerability may affect availability.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37008

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.90%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:22

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37013

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.25% / 47.73%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:27

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause the availability of users is affected.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2025-54641

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.7||MEDIUM

EPSS-0.01% / 0.67%

7 Day CHG~0.00%

Published-06 Aug, 2025 | 02:42

Updated-11 Aug, 2025 | 15:22

Issue of buffer overflow caused by insufficient data verification in the kernel acceleration module. Impact: Successful exploitation of this vulnerability may affect availability.

Product-emui harmonyos EMUI HarmonyOS

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-20

Improper Input Validation

CVE-2015-7845

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.22% / 44.50%

7 Day CHG~0.00%

Published-19 Nov, 2015 | 20:00

Updated-12 Apr, 2025 | 10:46

The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V100R001C20SPH605 allows remote attackers to cause a denial of service (CLI outage) via crafted SSH packets.

Product-espace_firmware espace_unified_gateway_u1980 espace_unified_gateway_u1960 espace_unified_gateway_u1930 espace_unified_gateway_u1910 espace_unified_gateway_u1981 espace_unified_gateway_u1911 n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2015-8670

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-6.5||MEDIUM

EPSS-0.17% / 38.09%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service.

Product-logcenter LogCenter V100R001C10

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37116

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.1||CRITICAL

EPSS-0.27% / 49.70%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 21:07

Updated-04 Aug, 2024 | 01:09

PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of the subscriber is changed.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37084

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-9.8||CRITICAL

EPSS-0.24% / 46.37%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:05

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37094

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.18% / 40.11%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:06

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system denial of service.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37026

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.90%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:23

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37096

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.26%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:06

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed.

Product-harmonyos HarmonyOS EMUI

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37025

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.90%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:25

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37060

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.15% / 36.26%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:02

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to SAMGR Heap Address Leakage.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37048

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.11% / 30.47%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:02

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2021-37019

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.90%

7 Day CHG~0.00%

Published-23 Nov, 2021 | 15:23

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause kernel crash.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2023-52368

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.07% / 20.95%

7 Day CHG~0.00%

Published-18 Feb, 2024 | 03:38

Updated-13 Mar, 2025 | 14:48

Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.

CWE ID-CWE-20

Improper Input Validation

CVE-2023-52372

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.08% / 25.19%

7 Day CHG~0.00%

Published-18 Feb, 2024 | 03:51

Updated-13 Mar, 2025 | 14:49

Vulnerability of input parameter verification in the motor module.Successful exploitation of this vulnerability may affect availability.

Product-emui harmonyos HarmonyOS EMUI harmonyos emui

CWE ID-CWE-20

Improper Input Validation

CVE-2023-49248

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 9.91%

7 Day CHG~0.00%

Published-06 Dec, 2023 | 08:34

Updated-02 Aug, 2024 | 21:53

Vulnerability of unauthorized file access in the Settings app. Successful exploitation of this vulnerability may cause unauthorized file access.

CWE ID-CWE-20

Improper Input Validation

CVE-2023-46763

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.11% / 29.45%

7 Day CHG~0.00%

Published-08 Nov, 2023 | 09:33

Updated-04 Sep, 2024 | 15:35

Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously.

CWE ID-CWE-20

Improper Input Validation

CVE-2014-9417

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-2.1||LOW

EPSS-0.10% / 28.38%

7 Day CHG~0.00%

Published-24 Dec, 2014 | 18:00

Updated-12 Apr, 2025 | 10:46

The Meeting component in Huawei eSpace Desktop before V100R001C03 allows local users to cause a denial of service (program exit) via a crafted image.

Product-espace_desktop n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2014-8572

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.28% / 51.05%

7 Day CHG~0.00%

Published-02 Apr, 2017 | 20:00

Updated-20 Apr, 2025 | 01:37

Huawei AC6605 with software V200R001C00; AC6605 with software V200R002C00; ACU with software V200R001C00; ACU with software V200R002C00; S2300, S3300, S2700, S3700 with software V100R006C05 and earlier versions; S5300, S5700, S6300, S6700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions; S7700, S9300, S9300E, S9700 with software V100R006, V200R001, V200R002, V200R003, V200R005C00SPC300 and earlier versions could allow remote attackers to send a special SSH packet to the VRP device to cause a denial of service.

CWE ID-CWE-20

Improper Input Validation

CVE-2022-44556

Matching Score-6

Assigner-Huawei Technologies

Matching Score-6

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 20.74%

7 Day CHG~0.00%

Published-08 Nov, 2022 | 00:00

Updated-01 May, 2025 | 18:15

Missing parameter type validation in the DRM module. Successful exploitation of this vulnerability may affect availability.