[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWM4n4d4OITrwXVeDVusK3Oxrw-e252FK_xDz6310N6M":3,"g5a-family:huawei\u002Fnova_3_firmware":87,"g5a-ex:huawei\u002Fnova_3_firmware@*":88},{"success":4,"data":5},true,{"product":6,"versions":20,"topVulnerabilitiesByEpss":23,"kevVulnerabilities":56,"seoMetadata":65,"meta":84},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":19},"huawei","nova_3_firmware",2,5,"2020-03-10",[13,17],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},"9.1.0.338\\(c00e333r1p1t8\\)",0,false,{"version":18,"cve_count":15,"kev_count":15,"has_kev":16},"9.1.0.351\\(c00e351r1p1t8\\)","Nova 3 Firmware by Huawei is a technology product with 2 tracked versions and 5 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[21,22],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},{"version":18,"cve_count":15,"kev_count":15,"has_kev":16},[24,32,38,44,48],{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":4,"epssScore":31},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",7.8,"v3.1","High",0.72105,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":37},"CVE-2020-0022","In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715","2020-02-13",8.8,0.06052,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":43},"CVE-2019-9506","The Bluetooth BR\u002FEDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka \"KNOB\") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.","2019-08-14",8.1,0.02691,{"cveId":45,"description":46,"publishedDate":11,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":4,"epssScore":47},"CVE-2020-0069","In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754",0.0137,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":16,"epssScore":55},"CVE-2018-7956","Huawei VIP App is a mobile app for Malaysia customers that purchased P20 Series, Nova 3\u002F3i and Mate 20. There is a vulnerability in versions before 4.0.5 that attackers can conduct bruteforce to the VIP App Web Services to get user information.","2018-12-04",5.3,"v3.0","Medium",0.00764,[57,62],{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"severity":30,"isKev":4,"epssScore":31,"cisaVulnName":58,"cisaDateAdded":59,"cisaShortDescription":60,"cisaRequiredAction":61},"Android Kernel Use-After-Free Vulnerability","2021-11-03","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"","Apply updates per vendor instructions.",{"cveId":45,"description":46,"publishedDate":11,"cvssScore":28,"severity":30,"isKev":4,"epssScore":47,"cisaVulnName":63,"cisaDateAdded":59,"cisaShortDescription":64,"cisaRequiredAction":61},"Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain \"AbstractEmu.\"",{"title":66,"metaDescription":67,"keywords":68,"structuredData":69},"Nova 3 Firmware by Huawei - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Nova 3 Firmware by Huawei covering 2 versions with 5 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Nova 3 Firmware vulnerabilities, Nova 3 Firmware security, Nova 3 Firmware CVE, Huawei Nova 3 Firmware, Nova 3 Firmware threat intelligence, Huawei security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Nova 3 Firmware KEV, Nova 3 Firmware exploited vulnerabilities",{"@context":70,"@type":71,"name":72,"description":67,"url":73,"manufacturer":74,"applicationCategory":78,"softwareVersion":79,"mainEntity":80},"https:\u002F\u002Fschema.org","SoftwareApplication","Nova 3 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fhuawei\u002Fnova_3_firmware",{"@type":75,"name":76,"url":77},"Organization","Huawei","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fhuawei","Security Software","2 versions tracked",{"@type":81,"name":82,"description":83,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Nova 3 Firmware Security Vulnerabilities","Security vulnerabilities affecting Nova 3 Firmware by Huawei",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":85,"apiVersion":86},"2026-10-19T01:59:54.875Z","3.0",[],{"rows":89,"total":9,"capped":16,"failed":15},[90,95],{"cveId":25,"name":58,"severity":30,"cvss":28,"added":59,"epss":31,"published":91,"ranges":92,"checked":4,"hits":94,"covers":16},"2019-10-11T19:15:10.947",[93],"before 9.1.0.351(c00e351r1p1t8)",[],{"cveId":45,"name":63,"severity":30,"cvss":28,"added":59,"epss":47,"published":96,"ranges":97,"checked":4,"hits":99,"covers":16},"2020-03-10T20:15:21.947",[98],"before 9.1.0.338(c00e333r1p1t8)",[]]