CVE-2020-9257: Buffer Overflow
First published: Fri Jul 17 2020(Updated: )
HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a buffer overflow vulnerability. The software access data past the end, or before the beginning, of the intended buffer when handling certain operations of certificate, the attacker should trick the user into installing a malicious application, successful exploit may cause code execution.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei P30 Pro Firmware | <10.1.0.123\(c432e19r2p5patch02\) | |
| HUAWEI P30 Pro | ||
| Huawei P30 Pro Firmware | <10.1.0.126\(c10e11r5p1\) | |
| Huawei P30 Pro Firmware | <10.1.0.160\(c00e160r2p8\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-9257?
CVE-2020-9257 is a buffer overflow vulnerability found in HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8).
How severe is CVE-2020-9257?
CVE-2020-9257 has a severity ranking of 8.8 out of 10, making it a high-severity vulnerability.
What software is affected by CVE-2020-9257?
The affected software is HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8).
How can I fix CVE-2020-9257?
To fix CVE-2020-9257, you should update your HUAWEI P30 Pro smartphone to version 10.1.0.123(C432E19R2P5patch02) or later.
Where can I find more information about CVE-2020-9257?
You can find more information about CVE-2020-9257 on the official Huawei website at https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-03-smartphone-en.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei p30 pro firmware
- canonical/huawei p30 pro