7.1

CVE-2020-1808

Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.176(C00E60R2P11);9.1.0.135(C00E133R2P1); versions earlier than 10.1.0.123(C431E22R3P5), versions earlier than 10.1.0.126(C636E5R3P4), versions earlier than 10.1.0.160(C00E160R2P11); versions earlier than 10.1.0.126(C185E8R5P1), versions earlier than 10.1.0.126(C636E9R2P4), versions earlier than 10.1.0.160(C00E160R2P8); versions earlier than 10.0.0.179(C636E3R4P3), versions earlier than 10.0.0.180(C185E3R3P3), versions earlier than 10.0.0.180(C432E10R3P4), versions earlier than 10.0.0.181(C675E5R1P2) have an out of bound read vulnerability. The software reads data past the end of the intended buffer. The attacker tricks the user into installing a crafted application, successful exploit may cause information disclosure or service abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Honor View 20 Firmware Version < 10.0.0.179\(c636e3r4p3\)
   Huawei ≫ Honor View 20 Version -
Huawei ≫ Honor View 20 Firmware Version < 10.0.0.180\(c185e3r3p3\)
   Huawei ≫ Honor View 20 Version -
Huawei ≫ Honor View 20 Firmware Version < 10.0.0.180\(c432e10r3p4\)
   Huawei ≫ Honor View 20 Version -
Huawei ≫ Honor View 20 Firmware Version < 10.0.0.188\(c00e62r2p11\)
   Huawei ≫ Honor View 20 Version -
Huawei ≫ Honor 20 Firmware Version < 10.0.0.187\(c00e60r4p11\)
   Huawei ≫ Honor 20 Version -
Huawei ≫ Honor 20 Pro Firmware Version < 10.0.0.187\(c00e60r4p11\)
   Huawei ≫ Honor 20 Pro Version -
Huawei ≫ Honor Magic2 Firmware Version < 10.0.0.176\(c00e60r2p11\)
   Huawei ≫ Honor Magic2 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.411
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
NIST 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:N/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-02-smartphone-en
Vendor Advisory