Nova 3 Firmware (Huawei) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2020-03-10. Vendor: Huawei.

CVEs of Nova 3 Firmware

• CVE-2020-0069 - CVSS 7.8 (high), 2020-03-10: In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux…
• CVE-2020-0022 - CVSS 8.8 (high), 2020-02-13: In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote…
• CVE-2019-2215 - CVSS 7.8 (high), 2019-10-11: A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this…
• CVE-2019-9506 - CVSS 8.1 (high), 2019-08-14: The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from…
• CVE-2018-7956 - CVSS 5.3 (medium), 2018-12-04: Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3/3i and Mate 20. There is a vulnerability in versions before 4.0.5 that…