Riskcovery

CVE-2020-9247

State
Published
Severity
Not scored
Published
Dec 7, 2020
Updated
Aug 4, 2024
Reserved
Feb 18, 2020

Read the record on cve.org

Description

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
HONOR 20 PROHuawei
  • before 10.1.0.230(C432E9R5P1)Affected
  • before 10.1.0.231(C10E3R3P2)Affected
HUAWEI Mate 20Huawei
  • before 10.1.0.160(C00E160R3P8)Affected
HUAWEI Mate 20 ProHuawei
  • before 10.1.0.270(C432E7R1P5)Affected
  • before 10.1.0.270(C635E3R1P5)Affected
  • before 10.1.0.273(C185E7R2P4)Affected
  • before 10.1.0.273(C636E7R2P4)Affected
  • before 10.1.0.277(C10E7R2P4)Affected
  • before 10.1.0.277(C605E7R1P5)Affected
HUAWEI Mate 20 XHuawei
  • before 10.1.0.160(C00E160R2P8)Affected
HUAWEI P30Huawei
  • 9.1.0.272(C635E4R2P2)Affected
  • before 10.1.0.123(C432E22R2P5)Affected
  • before 10.1.0.126(C10E7R5P1)Affected
  • before 10.1.0.126(C185E4R7P1)Affected
  • before 10.1.0.126(C605E19R1P3)Affected
  • before 10.1.0.126(C636E5R3P4)Affected
  • before 10.1.0.126(C636E7R3P4)Affected
HUAWEI P30 ProHuawei
  • before 10.1.0.160(C00E160R2P8)Affected
Hima-L29CHuawei
  • before 10.1.0.273(C185E5R2P4)Affected
  • before 10.1.0.273(C636E5R2P4)Affected
  • before 10.1.0.275(C10E4R2P4)Affected
Laya-AL00EPHuawei
  • before 10.1.0.160(C786E160R3P8)Affected
Princeton-AL10BHuawei
  • before 10.1.0.160(C00E160R2P11)Affected
Tony-AL00BHuawei
  • before 10.1.0.160(C00E160R2P11)Affected
Yale-L61AHuawei
  • before 10.1.0.225(C432E3R1P2)Affected
  • before 10.1.0.226(C10E3R1P1)Affected
Yale-TL00BHuawei
  • before 10.1.0.160(C01E160R8P12)Affected
YaleP-AL10BHuawei
  • before 10.1.0.160(C00E160R8P12)Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.