Vulnerability · Published Jul 31, 2020 · Assigned by huawei

CVE-2020-9249

Medium 6.5

In plain English

A medium-severity security flaw in HUAWEI P30. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)0.3%top 74.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

HUAWEI P30 smartphones with versions earlier than 10.1.0.160(C00E160R2P11) have a denial of service vulnerability. A module does not deal with mal-crafted messages and it leads to memory leak. Attackers can exploit this vulnerability to make the device denial of service.Affected product versions include: HUAWEI P30 versions Versions earlier than 10.1.0.160(C00E160R2P11).

Affected products (as reported)

VendorProductVersions
n/a HUAWEI P30 Versions earlier than 10.1.0.160(C00E160R2P11)

References