Huawei Columbia-Tl00B Firmware vulnerabilities
2 known vulnerabilities affecting huawei/columbia-tl00b_firmware.
Total CVEs
2
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
HIGH1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2020-9069MEDIUMCVSS 6.5fixed in 9.0.0.187\(c01e181r1p20t8\)2020-05-21
CVE-2020-9069 [MEDIUM] CVE-2020-9069: There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent
There is an information leakage vulnerability in some Huawei products. An unauthenticated, adjacent attacker could exploit this vulnerability to decrypt data. Successful exploitation may leak information randomly. Affected product versions include: Anne-AL00 Versions earlier than 9.1.0.331(C675E9R1P3T8); Berkeley-L09 Versions earlier than 10.0.1.1(C675R1); CD1
nvd
CVE-2020-0069HIGHCVSS 7.8KEVfixed in 10.0.0.178\(c01e178r1p4\)2020-03-10
CVE-2020-0069 [HIGH] CWE-787 CVE-2020-0069: In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kern
nvd