Buffer Overflow Vulnerability in HUAWEI P30 Pro Smartphones
CVE-2020-9257
8.8HIGH
Summary
The HUAWEI P30 Pro smartphones are susceptible to a buffer overflow vulnerability that allows an attacker to manipulate software operations related to certificates. This flaw lets the software access memory locations beyond the intended buffer boundaries, which could lead to unauthorized code execution if a user is tricked into installing a malicious application. Users of affected versions should update their devices promptly to mitigate potential risks associated with this vulnerability.
Affected Version(s)
HUAWEI P30 Pro Versions earlier than 10.1.0.123(C432E19R2P5patch02)
HUAWEI P30 Pro Versions earlier than 10.1.0.126(C10E11R5P1)
HUAWEI P30 Pro Versions earlier than 10.1.0.160(C00E160R2P8)
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved