CVE-2020-9257: Buffer Overflow
HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a buffer overflow vulnerability. The software access data past the end, or before the beginning, of the intended buffer when handling certain operations of certificate, the attacker should trick the user into installing a malicious application, successful exploit may cause code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-9257?
CVE-2020-9257 is a buffer overflow vulnerability found in HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8).
How severe is CVE-2020-9257?
CVE-2020-9257 has a severity ranking of 8.8 out of 10, making it a high-severity vulnerability.
What software is affected by CVE-2020-9257?
The affected software is HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8).
How can I fix CVE-2020-9257?
To fix CVE-2020-9257, you should update your HUAWEI P30 Pro smartphone to version 10.1.0.123(C432E19R2P5patch02) or later.
Where can I find more information about CVE-2020-9257?
You can find more information about CVE-2020-9257 on the official Huawei website at https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-03-smartphone-en.