PT-2020-20475 · Huawei · Honor 20 Pro+2

Published 2020-06-05 · Updated 2020-06-10 · CVE-2020-9074

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Huawei Smartphones versions HONOR 20 PRO, Honor View 20, HONOR 20

Description The issue is related to an improper handling of exceptional conditions. A component cannot deal with an exception correctly, allowing attackers to exploit this by sending a malformed message. This could compromise the normal service of the affected phones.

Recommendations For versions HONOR 20 PRO, Honor View 20, HONOR 20, consider restricting the handling of exceptional conditions until a patch is available. As a temporary workaround, avoid processing malformed messages in the affected component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2020-9074

Affected Products

Honor V20

Honor 20 Pro

Honor View 20

References · 4

• https://osv.dev/vulnerability/CVE-2020-9074 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200603-01-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9074 · Security Note
• https://t.me/cvenotify/4233 · Telegram Post