PT-2020-15077 · Huawei · Honor V10+1

Published 2020-04-27 · Updated 2020-05-01 · CVE-2020-1805

Telegram · Cvenotify

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

🚨 CVE-2020-1804 Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 1 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1805 and CVE-2020-1806.

🎖@cveNotify

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-1805

Affected Products

Honor V10

Honor V10 Firmware

References · 4

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-1805 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-1805 · Security Note
• https://t.me/cvenotify/3248 · Telegram Post