Buffer Overflow Vulnerability in HUAWEI P30 Pro Smartphones
CVE-2020-9257

8.8HIGH

Key Information:

Vendor

Huawei
Status
Huawei P30 Pro
Vendor
CVE Published:
17 July 2020

What is CVE-2020-9257?

The HUAWEI P30 Pro smartphones are susceptible to a buffer overflow vulnerability that allows an attacker to manipulate software operations related to certificates. This flaw lets the software access memory locations beyond the intended buffer boundaries, which could lead to unauthorized code execution if a user is tricked into installing a malicious application. Users of affected versions should update their devices promptly to mitigate potential risks associated with this vulnerability.

Affected Version(s)

HUAWEI P30 Pro Versions earlier than 10.1.0.123(C432E19R2P5patch02)

HUAWEI P30 Pro Versions earlier than 10.1.0.126(C10E11R5P1)

HUAWEI P30 Pro Versions earlier than 10.1.0.160(C00E160R2P8)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.