CVE-2020-9235: Input Validation
Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.212(C432E10R3P4),Versions earlier than 10.1.0.213(C636E3R4P3),Versions earlier than 10.1.0.214(C10E5R4P3),Versions earlier than 10.1.0.214(C185E3R3P3);Versions earlier than 10.1.0.212(C00E210R5P1);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C01E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R8P12);Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.225(C431E3R1P2),Versions earlier than 10.1.0.225(C432E3R1P2) contain an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerability to obtain some information. This can lead to information leak.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-9235?
CVE-2020-9235 is a vulnerability found in Huawei smartphones HONOR 20 PRO.
How does CVE-2020-9235 affect Huawei smartphones?
CVE-2020-9235 affects versions earlier than 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2), 10.1.0.231(C185E3R5P1), and 10.1.0.231(C636E3R3P1) of Huawei smartphones HONOR 20 PRO.
What is the severity of CVE-2020-9235?
CVE-2020-9235 has a severity rating of 5.5 (medium).
How can I fix CVE-2020-9235?
To fix CVE-2020-9235, update your Huawei smartphone HONOR 20 PRO to version 10.1.0.230(C432E9R5P1) or later.
Where can I find more information about CVE-2020-9235?
You can find more information about CVE-2020-9235 on the official Huawei website: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200902-07-smartphone-en