CVEvulnerability

CVE-2020-9258

5.5 MEDIUM Published 2020-07-10 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2020-07-10
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
Weaknesses: CWE-20

Description

HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerability. An attribution in a module is not set correctly and some verification is lacked. Attackers with local access can exploit this vulnerability by injecting malicious fragment. This may lead to user information leak.

Affected configurations

• huawei p30 firmware (< 10.1.0.135\(c00e135r2p11\))

Weakness · CWE (1)

CWE-20 Improper Input Validation weakness

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200708-02-smartphone-en Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200708-02-smartphone-en Vendor Advisory

CVE-2020-9258

Description

Affected configurations

Related

Weakness · CWE (1)

References