Huawei

Nova 3 Firmware

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2020-0069

Warning
  • EPSS 0.74%
  • Published 10.03.2020 20:15:21
  • Last modified 04.04.2025 13:01:47

In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution...

8.8

CVE-2020-0022

Exploit
  • EPSS 7.73%
  • Published 13.02.2020 15:15:11
  • Last modified 21.11.2024 04:52:45

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction...

7.8

CVE-2019-2215

Warning Exploit
  • EPSS 49.83%
  • Published 11.10.2019 19:15:10
  • Last modified 04.04.2025 15:40:44

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local appli...

8.1

CVE-2019-9506

  • EPSS 3.04%
  • Published 14.08.2019 17:15:11
  • Last modified 21.11.2024 04:51:45

The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") tha...

5.3

CVE-2018-7956

  • EPSS 0.11%
  • Published 04.12.2018 18:29:00
  • Last modified 21.11.2024 04:13:00

Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.