CVE-2020-9247: vulnerability in Huawei HONOR 20 PRO
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.8%
There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.
Affected products
Huawei · Hima-L29CHuawei · HONOR 20 PROHuawei · HUAWEI Mate 20Huawei · HUAWEI Mate 20 ProHuawei · HUAWEI Mate 20 XHuawei · HUAWEI P30Huawei · HUAWEI P30 ProHuawei · Laya-AL00EPHuawei · Princeton-AL10BHuawei · Tony-AL00BHuawei · Yale-L61AHuawei · YaleP-AL10BHuawei · Yale-TL00BRelated CVEs — Huawei HONOR 20 PRO
In the same product, most dangerous first.