[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzXmNnR7HNfu011IXeQB3gkNnyrakYfZAb6JRImkEgVA":3,"g5a-ex:huawei\u002Fmate_20_firmware@*":147,"g5a-family:huawei\u002Fmate_20_firmware":149},{"success":4,"data":5},true,{"product":6,"versions":49,"topVulnerabilitiesByEpss":66,"kevVulnerabilities":124,"seoMetadata":125,"meta":144},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":48},"huawei","mate_20_firmware",16,31,0,"2024-12-27",[14,17,19,21,23,25,27,29,31,34,36,38,40,42,44,46],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.0.175\\(c00e70r3p8\\)",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.0.185\\(c00e74r3p8\\)",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.0.188\\(c00e74r3p8\\)",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.0.195\\(c00e74r3p8\\)",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"10.0.0.195\\(sp31c00e74r3p8\\)",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"10.1.0.160\\(c00e160r3p8\\)",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"10.1.0.160\\(c01e160r2p8\\)",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"10.1.0.163\\(c00e160r3p8\\)",{"version":32,"cve_count":33,"kev_count":11,"has_kev":16},"9.0.0.195\\(c01e195r2p1\\)",1,{"version":35,"cve_count":33,"kev_count":11,"has_kev":16},"9.0.0.205\\(c00e205r2p1\\)",{"version":37,"cve_count":11,"kev_count":11,"has_kev":16},"9.1.0.131\\(c00e131r3p1\\)",{"version":39,"cve_count":33,"kev_count":11,"has_kev":16},"9.1.0.139\\(c00e133r3p1\\)",{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},"hima-al00b_9.1.0.135\\(c00e133r2p1\\)",{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},"hima-al00b_9.1.0.135\\(c00e200r2p1\\)",{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},"hima-al00b\\\u002Fhima-tl00b_9.0.0.200\\(c00e200r2p1\\)",{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},"hma-al00c00b175","Mate 20 Firmware by Huawei is a technology product with 16 tracked versions and 31 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":33,"kev_count":11,"has_kev":16},{"version":35,"cve_count":33,"kev_count":11,"has_kev":16},{"version":37,"cve_count":11,"kev_count":11,"has_kev":16},{"version":39,"cve_count":33,"kev_count":11,"has_kev":16},{"version":41,"cve_count":11,"kev_count":11,"has_kev":16},{"version":43,"cve_count":11,"kev_count":11,"has_kev":16},{"version":45,"cve_count":11,"kev_count":11,"has_kev":16},{"version":47,"cve_count":11,"kev_count":11,"has_kev":16},[67,75,81,88,94,98,105,111,116,119],{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":72,"severity":73,"isKev":16,"epssScore":74},"CVE-2020-0022","In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715","2020-02-13",8.8,"v3.1","High",0.06052,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":72,"severity":73,"isKev":16,"epssScore":80},"CVE-2019-9506","The Bluetooth BR\u002FEDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka \"KNOB\") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.","2019-08-14",8.1,0.02691,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":72,"severity":86,"isKev":16,"epssScore":87},"CVE-2019-5251","There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into installing, backing up and restoring a malicious application. Successful exploit could cause information disclosure.","2019-12-13",5.5,"Medium",0.00839,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":72,"severity":73,"isKev":16,"epssScore":93},"CVE-2019-5225","P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P12) have a buffer overflow vulnerability on several , the system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user to install a malicious application, successful exploit could cause malicious code execution.","2019-11-29",7.8,0.00828,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":92,"cvssVersion":72,"severity":73,"isKev":16,"epssScore":93},"CVE-2020-9247","There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.","2020-12-07",{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":103,"severity":86,"isKev":16,"epssScore":104},"CVE-2018-7956","Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3\u002F3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.","2018-12-04",5.3,"v3.0",0.00764,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":72,"severity":73,"isKev":16,"epssScore":110},"CVE-2020-9113","HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth messages after successful paring, causing buffer overflow. Successful exploit may cause code execution.","2020-10-19",8,0.00449,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":102,"cvssVersion":72,"severity":86,"isKev":16,"epssScore":115},"CVE-2019-5302","There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)","2020-04-27",0.00323,{"cveId":117,"description":118,"publishedDate":114,"cvssScore":102,"cvssVersion":72,"severity":86,"isKev":16,"epssScore":115},"CVE-2019-5303","There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 2 out of 2 vulnerabilities. Different than CVE-2020-5302. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)",{"cveId":120,"description":121,"publishedDate":108,"cvssScore":122,"cvssVersion":72,"severity":86,"isKev":16,"epssScore":123},"CVE-2020-9092","HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does not verify a specific input. This could allow attackers to bypass filter mechanism to launch JavaScript injection. This could compromise normal service of the affected module.",4.6,0.00283,[],{"title":126,"metaDescription":127,"keywords":128,"structuredData":129},"Mate 20 Firmware by Huawei - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mate 20 Firmware by Huawei covering 16 versions with 31 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mate 20 Firmware vulnerabilities, Mate 20 Firmware security, Mate 20 Firmware CVE, Huawei Mate 20 Firmware, Mate 20 Firmware threat intelligence, Huawei security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":130,"@type":131,"name":132,"description":127,"url":133,"manufacturer":134,"applicationCategory":138,"softwareVersion":139,"mainEntity":140},"https:\u002F\u002Fschema.org","SoftwareApplication","Mate 20 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fhuawei\u002Fmate_20_firmware",{"@type":135,"name":136,"url":137},"Organization","Huawei","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fhuawei","Security Software","16 versions tracked",{"@type":141,"name":142,"description":143,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Mate 20 Firmware Security Vulnerabilities","Security vulnerabilities affecting Mate 20 Firmware by Huawei",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":145,"apiVersion":146},"2026-10-18T23:49:18.072Z","3.0",{"rows":148,"total":11,"capped":16,"failed":11},[],[]]