HIGH🇬🇧 English

CVE-2020-9113

CVSS 8.0v3.1pub. 2020-10-19upd. 2024-11-21

HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth messages after successful paring, causing buffer overflow. Successful exploit may cause code execution.

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Huawei Mate 20

    HW
    Huawei
    wszystkie wersje

  • Huawei Mate 20 Firmware

    OS
    Huawei
    < 10.0.0.188\(c00e74r3p8\)
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEAuth BypassMemory
CWE
Referencje

Powiązane podatności

CVE-2020-9247HIGH7.8ten sam produkt

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate...

CVE-2020-0022HIGH8.8ten sam produkt

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect ...

CVE-2019-5225HIGH7.8ten sam produkt

P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), v...

CVE-2021-22440MEDIUM4.6ten sam produkt

There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software...

CVE-2020-9092MEDIUM4.6ten sam produkt

HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A modu...