CVEvulnerability

CVE-2020-9257

8.8 HIGH Published 2020-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-120

Description

HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a buffer overflow vulnerability. The software access data past the end, or before the beginning, of the intended buffer when handling certain operations of certificate, the attacker should trick the user into installing a malicious application, successful exploit may cause code execution.

Affected configurations

• huawei p30 pro firmware (< 10.1.0.123\(c432e19r2p5patch02\)) • huawei p30 pro firmware (< 10.1.0.126\(c10e11r5p1\)) • huawei p30 pro firmware (< 10.1.0.160\(c00e160r2p8\))

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References