Ding Yicong

**Name of the Vulnerable Software and Affected Versions** Smartphones (affected versions not specified) **Description** The system has a logic judging error under certain scenarios, allowing an attacker to gain certain information from apps locked by Applock if they obtain permission to execute commands in ADB mode and perform a series of operations on the phone. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Huawei smartphones (affected versions not specified) **Description** The issue is related to an improper authorization vulnerability. An attacker could perform a series of operations in a specific mode to exploit this vulnerability, potentially allowing them to bypass app lock. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HUAWEI Mate 20 versions prior to 10.1.0.163(C00E160R3P8) **Description** The issue is related to a denial of service (DoS) that can be triggered by entering a large amount of text on the phone, due to insufficient verification of a parameter. Successful exploitation can impact the service. **Recommendations** For versions prior to 10.1.0.163(C00E160R3P8), update to version 10.1.0.163(C00E160R3P8) or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R2P11) HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8) Since both versions are essentially the same, with the difference being in the patch level (R2P11 vs R3P8), and given that R3P8 is a more specific and potentially later patch, we can consolidate this information into a single line for clarity and accuracy: HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8) **Description** The issue is related to an improper authorization vulnerability where the software does not properly restrict certain operations under specific scenarios. This can be exploited if the attacker configures the device in a certain way before the user enables the student mode function. Successful exploitation could allow the attacker to bypass the limitations imposed by the student mode function. **Recommendations** For HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), update to version 10.1.0.160(C00E160R3P8) or later to resolve the issue. As a temporary workaround, consider restricting the use of the student mode function until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** HUAWEI Mate 20 smartphones versions prior to 10.0.0.185(C00E74R3P8) **Description** The system has an improper authorization issue, where it does not properly restrict certain operations in ADB mode. This could allow a user to break the limit of the digital balance function. **Recommendations** For versions prior to 10.0.0.185(C00E74R3P8), update to version 10.0.0.185(C00E74R3P8) or later to resolve the issue. As a temporary workaround, consider restricting access to ADB mode to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Honor 9X versions earlier than 9.1.1.172(C00E170R8P1) **Description** The issue is related to an improper authentication vulnerability. It involves a logic error when handling the clock function. An attacker can exploit this by performing a series of crafted operations quickly before the phone is unlocked, potentially allowing access to clock information without unlocking the phone. **Recommendations** For versions earlier than 9.1.1.172(C00E170R8P1), update to version 9.1.1.172(C00E170R8P1) or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** HUAWEI Mate 20 smartphones versions earlier than 10.0.0.195(SP31C00E74R3P8) **Description** The digital balance function in the affected smartphones has an improper authorization issue, which does not sufficiently restrict the usage time of certain users. This could allow a user to bypass the digital balance function's limits after performing a series of operations with a PC. **Recommendations** For versions earlier than 10.0.0.195(SP31C00E74R3P8), update to version 10.0.0.195(SP31C00E74R3P8) or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** HUAWEI Mate 10 smartphones versions prior to 10.0.0.143(C00E143R2P4) **Description** The issue allows an attacker to exploit a series of crafted voice operations to wake up the voice assistant, potentially leading to information disclosure by reading certain files without unlocking the phone. **Recommendations** For versions prior to 10.0.0.143(C00E143R2P4), update to version 10.0.0.143(C00E143R2P4) or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** HUAWEI Mate 20 smartphones versions prior to 10.0.0.188(C00E74R3P8) **Description** The issue is related to improper authorization, where the software fails to properly restrict user modification of a certain configuration file. This could allow an attacker to bypass the app lock after performing a series of operations in ADB mode. **Recommendations** For versions prior to 10.0.0.188(C00E74R3P8), update to version 10.0.0.188(C00E74R3P8) or later to resolve the issue. As a temporary workaround, consider restricting access to ADB mode to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) HUAWEI Mate 30 Pro versions earlier than 10.0.0.203(C00E202R7P2) **Description** The software does not properly restrict certain operations when the Digital Balance function is on, due to a logic error vulnerability. Successful exploitation could allow an attacker to bypass the Digital Balance limit after a series of operations. **Recommendations** For HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8), update to version 10.0.0.188(C00E74R3P8) or later. For HUAWEI Mate 30 Pro versions earlier than 10.0.0.203(C00E202R7P2), update to version 10.0.0.203(C00E202R7P2) or later. As a temporary workaround, consider disabling the Digital Balance function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) HUAWEI Mate 30 Pro versions earlier than 10.0.0.203(C00E202R7P2) **Description** The issue is related to improper authorization in the software of several smartphones. It incorrectly performs authorization for certain users, which could allow a low-privilege user to perform operations they are not supposed to do. **Recommendations** For HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8), update to version 10.0.0.188(C00E74R3P8) or later. For HUAWEI Mate 30 Pro versions earlier than 10.0.0.203(C00E202R7P2), update to version 10.0.0.203(C00E202R7P2) or later.

**Name of the Vulnerable Software and Affected Versions** HUAWEI Mate 20 smartphones versions prior to 10.0.0.185(C00E74R3P8) **Description** The system has a logic judging error under certain scenarios, which could allow an attacker to switch to the third desktop after a series of operations in ADB mode. This is due to an improper authorization issue. **Recommendations** For versions prior to 10.0.0.185(C00E74R3P8), update to version 10.0.0.185(C00E74R3P8) or later to resolve the issue. As a temporary workaround, consider restricting ADB mode access to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** HUAWEI Mate 20 smartphones versions earlier than 9.1.0.139(C00E133R3P1) **Description** The system has a logic error under certain scenarios, which could allow an attacker with guest user privileges to access the host user's desktop without unlocking the screen lock of the host user. **Recommendations** For versions earlier than 9.1.0.139(C00E133R3P1), update to version 9.1.0.139(C00E133R3P1) or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Honor Play smartphones versions earlier than 9.1.0.333(C00E333R1P1T8) **Description** The issue allows an attacker to view certain information after a series of operations without unlocking the screen lock, potentially causing an information disclosure condition. **Recommendations** For versions earlier than 9.1.0.333(C00E333R1P1T8), update to version 9.1.0.333(C00E333R1P1T8) or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Honor Play smartphones versions earlier than 9.1.0.321(C00E320R1P1T8) **Description** The issue is related to insufficient authentication, which is caused by a logic judge error under certain scenarios. This could allow an attacker to modify alarm clock settings without unlocking the screen lock after performing a series of uncommon operations. **Recommendations** For versions earlier than 9.1.0.321(C00E320R1P1T8), update to version 9.1.0.321(C00E320R1P1T8) or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Huawei Mate 9 Pro versions earlier than LON-AL00B9.0.1.150 (C00E61R1P8T8) **Description** The issue allows an attacker to view photos on the device without unlocking the screen lock, following a series of specific operations. This could lead to an information disclosure condition. **Recommendations** For versions earlier than LON-AL00B9.0.1.150 (C00E61R1P8T8), update to a version LON-AL00B9.0.1.150 (C00E61R1P8T8) or later to resolve the issue.