CVE-2020-9149 — Huawei Emui vulnerability

3 documents3 sources

Severity

5.5MEDIUMNVD

EPSS

0.0%

top 93.84%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Emui Huawei Magic UI

Timeline

PublishedApr 1

Latest updateMay 24

Description

An application error verification vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to modify and delete user SMS messages.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/emui4 versions+3

▶NVDhuawei/magic_ui4 versions+3

🔴Vulnerability Details

GHSA

GHSA-vw25-r297-m2vg: An application error verification vulnerability exists in a component interface of Huawei Smartphone↗2022-05-24

▶

CVEList

CVE-2020-9149: An application error verification vulnerability exists in a component interface of Huawei Smartphone↗2021-04-01

▶