Vulnerability · Published Jun 5, 2020 · Assigned by huawei

CVE-2020-9074

Medium 5.3

In plain English

A medium-severity security flaw in HONOR 20. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).

Severity (CVSS NVD)5.3Medium
Exploit odds (30 days)0.7%top 45.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot deal with an exception correctly. Attackers can exploit this vulnerability by sending malformed message. This could compromise normal service of affected phones.

Affected products (as reported)

VendorProductVersions
n/a HONOR 20 PRO Versions earlier than 10.0.0.194(C432E9R5P1)Versions earlier than 10.0.0.194(C636E3R3P1)Versions earlier than 10.0.0.194(C00E62R8P12)Versions earlier than 10.0.0.194(C10E3R3P2)
n/a Honor View 20 Versions earlier than 10.0.0.200(C185E3R3P3)Versions earlier than 10.0.0.201(C636E3R4P3)Versions earlier than 10.0.0.195(C00E62R4P11)Versions earlier than 10.0.0.201(C10E5R4P3)
n/a HONOR 20 Versions earlier than 10.0.0.186(C185E2R2P1)Versions earlier than 10.0.0.194(C432E9R5P1)

References