PT-2020-20527 · Huawei · Moana-Al00B

Published 2020-07-17 · Updated 2020-07-22 · CVE-2020-9227

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei Smart Phones Moana-AL00B versions prior to 10.1.0.166

Description The issue is related to a missing initialization of resource vulnerability. An attacker can trick a user into installing and running a crafted application, which may cause device exceptions due to improper initialization of specific parameters.

Recommendations For versions prior to 10.1.0.166, update to version 10.1.0.166 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-909

Related Identifiers

CVE-2020-9227

Affected Products

Moana-Al00B

References · 3

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200715-09-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9227 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9227 · Vendor Advisory