CVE-2020-9140 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Huawei Emui

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory BufferCWE-787 — Out-of-bounds Write3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.6%
top 30.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Magic UI
Timeline
PublishedJan 13
Latest updateMay 24

Description

There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code execution when a buffer overflow occurs.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDhuawei/emui6 versions+5
▶NVDhuawei/magic_ui5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-mhmp-xjgc-756r: There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone↗2022-05-24
▶
CVEList
CVE-2020-9140: There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone↗2021-01-13
▶
CVE-2020-9140 — Huawei Emui vulnerability | cvebase