CVE-2020-9139: Input Validation

Published Jan 13, 2021

Updated

There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory access errors and denial of service.

Affected Software

11 affected components

Huawei Emui=9.1.0

Huawei Emui=9.1.1

Huawei Emui=10.0.0

Huawei Emui=10.1.0

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Magic Ui=2.1.1

Huawei Magic Ui=3.0.0

Huawei Magic Ui=3.1.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

Jan 13, 2021

CVE Published

via MITRE·09:58 PM

Data Sourced

via MITRE·09:58 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-9139?

CVE-2020-9139 has a severity rating that indicates it can lead to memory access errors and denial of service.

How do I fix CVE-2020-9139?

To fix CVE-2020-9139, update to the latest software versions provided by Huawei.

Which Huawei software versions are affected by CVE-2020-9139?

CVE-2020-9139 affects Huawei Emui versions 9.1.0, 9.1.1, 10.0.0, 10.1.0, 10.1.1, and 11.0.0, as well as Magic UI versions 2.1.1, 3.0.0, 3.1.0, 3.1.1, and 4.0.0.

Can CVE-2020-9139 lead to data breaches?

CVE-2020-9139 primarily results in denial of service and may not directly lead to data breaches, but it poses a risk of service interruption.

Is there a workaround for CVE-2020-9139?

There are no known workarounds for CVE-2020-9139; updating to the patched software versions is recommended.