cbcvebase.
CVE-2020-9142
published 2021-01-13

CVE-2020-9142: There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory…

PriorityP342critical9.1CVSS 3.1
AVNACLPRNUINSUCNIHAH
EPSS
0.71%
49.5th percentile
There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly processes the update file.

Affected

11 ranges
VendorProductVersion rangeFixed in
huaweiemui——
huaweiemui——
huaweiemui——
huaweiemui——
huaweiemui——
huaweiemui——
huaweimagic_ui——
huaweimagic_ui——
huaweimagic_ui——
huaweimagic_ui——
huaweimagic_ui——

CVSS provenance

nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
nvdv2.06.4MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.