[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffDTxOfCYWaLMc17PqrH84KsWNMi4C90Ggf5Yvo1P2tE":3,"g5a-family:huawei\u002Fyale-al00a_firmware":87,"g5a-ex:huawei\u002Fyale-al00a_firmware@*":88},{"success":4,"data":5},true,{"product":6,"versions":20,"topVulnerabilitiesByEpss":23,"kevVulnerabilities":56,"seoMetadata":65,"meta":84},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":19},"huawei","yale-al00a_firmware",2,5,"2024-12-27",[13,17],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},"10.0.0.196\\(c00e62r8p12\\)",0,false,{"version":18,"cve_count":15,"kev_count":15,"has_kev":16},"10.1.0.160\\(c00e160r8p12\\)","Yale-al00a Firmware by Huawei is a technology product with 2 tracked versions and 5 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[21,22],{"version":14,"cve_count":15,"kev_count":15,"has_kev":16},{"version":18,"cve_count":15,"kev_count":15,"has_kev":16},[24,32,38,43,50],{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":4,"epssScore":31},"CVE-2019-2215","A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095","2019-10-11",7.8,"v3.1","High",0.72105,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":29,"severity":30,"isKev":16,"epssScore":37},"CVE-2019-9506","The Bluetooth BR\u002FEDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka \"KNOB\") that can decrypt traffic and inject arbitrary ciphertext without the victim noticing.","2019-08-14",8.1,0.02691,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":28,"cvssVersion":29,"severity":30,"isKev":4,"epssScore":42},"CVE-2020-0069","In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-147882143References: M-ALPS04356754","2020-03-10",0.0137,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":29,"severity":48,"isKev":16,"epssScore":49},"CVE-2020-9235","Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.212(C432E10R3P4),Versions earlier than 10.1.0.213(C636E3R4P3),Versions earlier than 10.1.0.214(C10E5R4P3),Versions earlier than 10.1.0.214(C185E3R3P3);Versions earlier than 10.1.0.212(C00E210R5P1);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C01E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R8P12);Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.225(C431E3R1P2),Versions earlier than 10.1.0.225(C432E3R1P2) contain an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerability to obtain some information. This can lead to information leak.","2020-09-03",5.5,"Medium",0.00242,{"cveId":51,"description":52,"publishedDate":11,"cvssScore":53,"cvssVersion":29,"severity":54,"isKev":16,"epssScore":55},"CVE-2020-9081","There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144)\n\n\n\nThis vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.",3.5,"Low",0.00202,[57,62],{"cveId":25,"description":26,"publishedDate":27,"cvssScore":28,"severity":30,"isKev":4,"epssScore":31,"cisaVulnName":58,"cisaDateAdded":59,"cisaShortDescription":60,"cisaRequiredAction":61},"Android Kernel Use-After-Free Vulnerability","2021-11-03","Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"","Apply updates per vendor instructions.",{"cveId":39,"description":40,"publishedDate":41,"cvssScore":28,"severity":30,"isKev":4,"epssScore":42,"cisaVulnName":63,"cisaDateAdded":59,"cisaShortDescription":64,"cisaRequiredAction":61},"Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain \"AbstractEmu.\"",{"title":66,"metaDescription":67,"keywords":68,"structuredData":69},"Yale-al00a Firmware by Huawei - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Yale-al00a Firmware by Huawei covering 2 versions with 5 tracked vulnerabilities including 0 critical and 2 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Yale-al00a Firmware vulnerabilities, Yale-al00a Firmware security, Yale-al00a Firmware CVE, Huawei Yale-al00a Firmware, Yale-al00a Firmware threat intelligence, Huawei security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Yale-al00a Firmware KEV, Yale-al00a Firmware exploited vulnerabilities",{"@context":70,"@type":71,"name":72,"description":67,"url":73,"manufacturer":74,"applicationCategory":78,"softwareVersion":79,"mainEntity":80},"https:\u002F\u002Fschema.org","SoftwareApplication","Yale-al00a Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fhuawei\u002Fyale-al00a_firmware",{"@type":75,"name":76,"url":77},"Organization","Huawei","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fhuawei","Security Software","2 versions tracked",{"@type":81,"name":82,"description":83,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Yale-al00a Firmware Security Vulnerabilities","Security vulnerabilities affecting Yale-al00a Firmware by Huawei",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":85,"apiVersion":86},"2026-10-19T03:16:45.116Z","3.0",[],{"rows":89,"total":9,"capped":16,"failed":15},[90,95],{"cveId":25,"name":58,"severity":30,"cvss":28,"added":59,"epss":31,"published":91,"ranges":92,"checked":4,"hits":94,"covers":16},"2019-10-11T19:15:10.947",[93],"before 10.1.0.160(c00e160r8p12)",[],{"cveId":39,"name":63,"severity":30,"cvss":28,"added":59,"epss":42,"published":96,"ranges":97,"checked":4,"hits":99,"covers":16},"2020-03-10T20:15:21.947",[98],"before 10.0.0.196(c00e62r8p12)",[]]