CVE-2020-9254

7.8HIGH

Key Information:

Vendor
Huawei
Status
Huawei P30 Pro
Vendor
CVE Published:
17 July 2020

Summary

HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a logic check error vulnerability. A logic error occurs when the software checking the size of certain parameter, the attacker should trick the user into installing a malicious application, successful exploit may cause code execution.

Affected Version(s)

HUAWEI P30 Pro Versions earlier than 10.1.0.123(C432E19R2P5patch02)

HUAWEI P30 Pro Versions earlier than 10.1.0.126(C10E11R5P1)

HUAWEI P30 Pro Versions earlier than 10.1.0.160(C00E160R2P8)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.