PT-2020-15076 · Huawei · Honor V10+1

Publicado 2020-04-27 · Atualizado 2020-05-01 · CVE-2020-1804

Telegram · Cvenotify

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

🚨 CVE-2020-1804 Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 1 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1805 and CVE-2020-1806.

🎖@cveNotify

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2020-1804

Produtos afetados

Honor V10

Honor V10 Firmware

Referências · 4

• https://osv.dev/vulnerability/CVE-2020-1804 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2020-1804 · Nota de Segurança
• https://t.me/cvenotify/3248 · Publicação no Telegram
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en · Aviso do Fabricante