PT-2020-15076 · Huawei · Honor V10+1

Published 2020-04-27 · Updated 2020-05-01 · CVE-2020-1804

Telegram · Cvenotify

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

🚨 CVE-2020-1804 Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 1 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1805 and CVE-2020-1806.

🎖@cveNotify

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-1804

Affected Products

Honor V10

Honor V10 Firmware

References · 4

• https://osv.dev/vulnerability/CVE-2020-1804 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1804 · Security Note
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en · Vendor Advisory
• https://t.me/cvenotify/3248 · Telegram Post