Huawei P30 Pro Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Huawei P30 Pro Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (29)

• CVE-2020-0022 — CVSS 8.8 (high): In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This…
• CVE-2020-9257 — CVSS 8.8 (high): HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and…
• CVE-2019-9506 — CVSS 8.1 (high): The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an…
• CVE-2020-9247 — CVSS 7.8 (high): There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration…
• CVE-2020-9254 — CVSS 7.8 (high): HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and…
• CVE-2019-5225 — CVSS 7.8 (high): P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than…
• CVE-2019-5228 — CVSS 7.8 (high): Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), Versions…
• CVE-2020-9123 — CVSS 7.8 (high): HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) and versions earlier than 10.1.0.160(C01E160R2P8) have a buffer overflow…
• CVE-2019-5215 — CVSS 6.8 (medium): There is a man-in-the-middle (MITM) vulnerability on Huawei P30 smartphones versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1)…
• CVE-2020-9076 — CVSS 6.8 (medium): HUAWEI P30;HUAWEI P30 Pro;Tony-AL00B smartphones with versions earlier than 10.1.0.135(C00E135R2P11); versions earlier than…
• CVE-2020-9244 — CVSS 6.8 (medium): HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro versions Versions earlier than…
• CVE-2020-9260 — CVSS 6.5 (medium): HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than…
• CVE-2019-5226 — CVSS 5.5 (medium): P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than…
• CVE-2020-9095 — CVSS 5.5 (medium): HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160(C00E160R2P8) has an integer overflow vulnerability. Some functions are lack…
• CVE-2020-9096 — CVSS 5.5 (medium): HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0.160(C00E160R2P8) have an out of bound read vulnerability. Some functions are…
• CVE-2020-9107 — CVSS 5.5 (medium): HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated…
• CVE-2020-9108 — CVSS 5.5 (medium): HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated…
• CVE-2020-9245 — CVSS 5.5 (medium): HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11);HUAWEI P30 Pro versions Versions earlier than 10.1.0.160(C00E160R2P8)…
• CVE-2019-5251 — CVSS 5.5 (medium): There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the…
• CVE-2019-5227 — CVSS 5.5 (medium): P30, P30 Pro, Mate 20 smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1), versions earlier than…
• CVE-2019-5302 — CVSS 5.3 (medium): There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a…
• CVE-2019-5303 — CVSS 5.3 (medium): There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a…
• CVE-2020-1836 — CVSS 5.3 (medium): HUAWEI P30 with versions earlier than 10.1.0.160(C00E160R2P11) and HUAWEI P30 Pro with versions earlier than 10.1.0.160(C00E160R2P8) have…
• CVE-2020-9106 — CVSS 4.6 (medium): HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability. The system does not sufficiently validate…
• CVE-2020-9109 — CVSS 4.6 (medium): There is an information disclosure vulnerability in several smartphones. The device does not sufficiently validate the identity of smart…
• CVE-2020-1834 — CVSS 4.6 (medium): HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135(C00E135R2P11) and versions earlier than 10.1.0.135(C00E135R2P8) have an…
• CVE-2019-5307 — CVSS 4.2 (medium): Some Huawei 4G LTE devices, P30 versions before ELE-AL00 9.1.0.162(C01E160R1P12/C01E160R2P1) and P30 Pro versions before VOG-AL00…
• CVE-2020-9081 — CVSS 3.5 (low): There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific…
• CVE-2020-9089 — CVSS 3.3 (low): There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access…