HIGH🇵🇱 Wersja polska

CVE-2020-1808

CVSS 7.1v3.1pub. 2020-05-15upd. 2024-11-21

Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.176(C00E60R2P11);9.1.0.135(C00E133R2P1); versions earlier than 10.1.0.123(C431E22R3P5), versions earlier than 10.1.0.126(C636E5R3P4), versions earlier than 10.1.0.160(C00E160R2P11); versions earlier than 10.1.0.126(C185E8R5P1), versions earlier than 10.1.0.126(C636E9R2P4), versions earlier than 10.1.0.160(C00E160R2P8); versions earlier than 10.0.0.179(C636E3R4P3), versions earlier than 10.0.0.180(C185E3R3P3), versions earlier than 10.0.0.180(C432E10R3P4), versions earlier than 10.0.0.181(C675E5R1P2) have an out of bound read vulnerability. The software reads data past the end of the intended buffer. The attacker tricks the user into installing a crafted application, successful exploit may cause information disclosure or service abnormal.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

  • Huawei Honor 20

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor 20 Firmware

    OS
    Huawei
    < 10.0.0.187\(c00e60r4p11\)

  • Huawei Honor 20 Pro

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor 20 Pro Firmware

    OS
    Huawei
    < 10.0.0.187\(c00e60r4p11\)

  • Huawei Honor Magic2

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor Magic2 Firmware

    OS
    Huawei
    < 10.0.0.176\(c00e60r2p11\)

  • Huawei Honor View 20

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor View 20 Firmware

    OS
    Huawei
    < 10.0.0.188\(c00e62r2p11\)< 10.0.0.180\(c432e10r3p4\)< 10.0.0.180\(c185e3r3p3\)< 10.0.0.179\(c636e3r4p3\)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-0069HIGH7.8⚠ KEVten sam produkt

In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to ins...

CVE-2020-9223HIGH7.5ten sam produkt

There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of recei...

CVE-2020-9247HIGH7.8ten sam produkt

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate...

CVE-2020-0022HIGH8.8ten sam produkt

In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect ...

CVE-2020-9235MEDIUM5.5ten sam produkt

Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(...