Integer Overflow Vulnerability in HUAWEI P30 Pro Smartphone
CVE-2020-9095

5.5MEDIUM

Key Information:

Vendor

Huawei
Status
Huawei P30 Pro
Vendor
CVE Published:
21 August 2020

What is CVE-2020-9095?

The HUAWEI P30 Pro smartphone is susceptible to an integer overflow vulnerability due to insufficient verification in certain functions processing messages from other modules. Attackers can exploit this flaw by sending crafted malicious messages, potentially leading to compromised service and disruption of normal operations.

Affected Version(s)

HUAWEI P30 Pro Versions earlier than 10.1.0.160(C00E160R2P8)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.