CVE-2020-9147: High severity emui 5.0 vulnerability

Published Apr 1, 2021

Updated

A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers may exploit this vulnerability by carefully constructing attack scenarios to cause out-of-bounds read.

Affected Software

8 affected components

Huawei Emui=10.0.0

Huawei Emui=10.1.0

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Magic Ui=3.0.0

Huawei Magic Ui=3.1.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

Apr 1, 2021

CVE Published

via MITRE·05:51 PM

Data Sourced

via MITRE·05:51 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-9147?

CVE-2020-9147 has a medium severity rating, indicating potential risks associated with the vulnerability.

How do I fix CVE-2020-9147?

To fix CVE-2020-9147, users should update their Huawei device to the latest software version that addresses the buffer error vulnerability.

Which Huawei devices are affected by CVE-2020-9147?

CVE-2020-9147 affects Huawei devices running EMUI versions 10.0.0 to 11.0.0 and Magic UI versions 3.0.0 to 4.0.0.

What type of vulnerability is CVE-2020-9147?

CVE-2020-9147 is a memory buffer error vulnerability that may allow out-of-bounds read attacks.

Can local attackers exploit CVE-2020-9147?

Yes, local attackers can exploit CVE-2020-9147 by carefully constructing attack scenarios.