Logic Check Error in HUAWEI P30 Pro Smartphones by HUAWEI
CVE-2020-9254

7.8HIGH

Key Information:

Vendor

Huawei
Status
Huawei P30 Pro
Vendor
CVE Published:
17 July 2020

What is CVE-2020-9254?

Certain versions of HUAWEI P30 Pro smartphones contain a logic check error that arises from improper validation of parameter sizes. An attacker can exploit this flaw by tricking users into installing a malicious application. If successfully executed, this vulnerability may lead to unintended code execution, compromising the integrity and security of the device.

Affected Version(s)

HUAWEI P30 Pro Versions earlier than 10.1.0.123(C432E19R2P5patch02)

HUAWEI P30 Pro Versions earlier than 10.1.0.126(C10E11R5P1)

HUAWEI P30 Pro Versions earlier than 10.1.0.160(C00E160R2P8)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.