CVE-2020-9211: huawei huawei mate 30 Out-of-bounds Read

Vulnerability summary

CVE-2020-9211 is a high (CVSS 7.2) Out-of-bounds Read vulnerability in huawei huawei mate 30. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.2% of scored vulnerabilities.

Timeline

1. 27-12-2024
   PublishedVulnerability first disclosed.
2. 27-12-2024
   Last modifiedVulnerability information updated.

Description

There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can exploit this vulnerability by modifying some configuration to cause out-of-bound read and write, causing denial of service. (Vulnerability ID: HWPSIRT-2020-05103) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9211.

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.