CVE-2020-9249

CWE-401 — Memory LeakCWE-20 — Improper Input Validation3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 84.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Huawei P30 Firmware
Timeline
PublishedJul 31
Latest updateMay 24

Description

HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability. A module does not deal with mal-crafted messages and it leads to memory leak. Attackers can exploit this vulnerability to make the device denial of service.Affected product versions include: HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11).

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/p30_firmware< 10.1.0.160\(c00e160r2p11\)
▶CVEListV5huawei_p30Versions earlier than 10.1.0.160(C00E160R2P11)

🔴Vulnerability Details

2
GHSA
GHSA-xcr6-53hx-vmwq: HUAWEI P30 smartphones with versions earlier than 10↗2022-05-24
▶
CVEList
CVE-2020-9249: HUAWEI P30 smartphones with versions earlier than 10↗2020-07-31
▶
CVE-2020-9249 (MEDIUM CVSS 6.5) | HUAWEI P30 smartphones with version | cvebase.io