CVE-2020-1792: Medium severity Huawei Honor V10 Firmware vulnerability
Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter when initializing certain driver program. An attacker could trick the user into installing a malicious application, successful exploit could cause the device to reboot.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Honor V10 smartphonesto a version that resolves this vulnerability.Fixed in BKL-AL20 10.0.0.156(C00E156R2P4) - Upgrade
Upgrade
Honor V10 smartphonesto a version that resolves this vulnerability.Fixed in BKL-L09 10.0.0.146(C432E4R1P4)
Event History
Frequently Asked Questions
What is CVE-2020-1792?
CVE-2020-1792 is a vulnerability affecting Honor V10 smartphones with earlier versions than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4).
What is the severity of CVE-2020-1792?
The severity of CVE-2020-1792 is high with a severity value of 5.5.
What software is affected by CVE-2020-1792?
Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) are affected by CVE-2020-1792.
What is the vulnerability description of CVE-2020-1792?
CVE-2020-1792 is an out of bounds write vulnerability that allows the software to write data beyond the intended buffer due to insufficient parameter validation.
How can I fix CVE-2020-1792?
To fix CVE-2020-1792, update your Honor V10 smartphone to BKL-AL20 10.0.0.156(C00E156R2P4) or BKL-L09 10.0.0.146(C432E4R1P4) or later versions.