PT-2020-20496 · Huawei · Huawei P30

Published 2020-08-21 · Updated 2020-08-25 · CVE-2020-9104

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions HUAWEI P30 smartphones versions earlier than 10.1.0.123 HUAWEI P30 smartphones versions earlier than 10.1.0.126 HUAWEI P30 smartphones versions earlier than 10.1.0.128 HUAWEI P30 smartphones versions earlier than 10.1.0.160

Description The issue is related to a denial of service vulnerability. It is caused by improper resource management and memory leak of some features. An attacker could exploit this vulnerability to cause the device to reset in specific scenarios.

Recommendations For versions earlier than 10.1.0.123, update to version 10.1.0.123 or later. For versions earlier than 10.1.0.126, update to version 10.1.0.126 or later. For versions earlier than 10.1.0.128, update to version 10.1.0.128 or later. For versions earlier than 10.1.0.160, update to version 10.1.0.160 or later.

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

CVE-2020-9104

Affected Products

Huawei P30

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-9104 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9104 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphonedos-en · Vendor Advisory