PT-2020-20512 · Huawei · Huawei P30 Pro

Published 2020-10-12 · Updated 2020-10-26 · CVE-2020-9123

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) HUAWEI P30 Pro versions earlier than 10.1.0.160(C01E160R2P8)

Description The issue is a buffer overflow that can be exploited by an attacker who induces users to install malicious applications and sends specially constructed packets to affected devices after obtaining root permission. Successful exploitation may cause code execution.

Recommendations For versions earlier than 10.1.0.160(C00E160R2P8), update to version 10.1.0.160(C00E160R2P8) or later. For versions earlier than 10.1.0.160(C01E160R2P8), update to version 10.1.0.160(C01E160R2P8) or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-9123

Affected Products

Huawei P30 Pro

References · 3

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200930-01-buffer-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9123 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9123 · Vendor Advisory