Race Condition Vulnerability in HUAWEI Mate 30
CVE-2020-1839

6.3MEDIUM

Key Information:

Vendor
Huawei
Status
Huawei Mate 30
Vendor
CVE Published:
6 July 2020

Summary

The HUAWEI Mate 30 is impacted by a race condition vulnerability due to a timing window where specific pointer members can be altered by another concurrently operating process. An attacker could exploit this vulnerability by persuading a user to execute a maliciously crafted application with elevated privileges. Successfully exploiting this weakness could lead to unauthorized code execution, compromising the integrity and security of the device.

Affected Version(s)

HUAWEI Mate 30 Versions earlier than 10.1.0.150(C00E136R5P3)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.