Dura-al00a Firmware vulnerabilities

2 known vulnerabilities in Dura-al00a Firmware from Huawei. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Mediatek Multiple Chipsets Insufficient Input Validation Exploited

  CVE-2020-0069Mar 10, 2020AndroidEPSS 1.38%

  In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient input sanitization and missing SELinux restrictions. This could lead to local escalation of privilege with no additional execution privilege

• 7.8 High severity

  Android Kernel Use-After-Free Exploited

  CVE-2019-2215Oct 11, 2019AndroidEPSS 72.1%

  A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or