7.1

CVE-2020-1808

Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI P30;HUAWEI P30 Pro;Honor View 20 smartphones with versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.187(C00E60R4P11); versions earlier than 10.0.0.176(C00E60R2P11);9.1.0.135(C00E133R2P1); versions earlier than 10.1.0.123(C431E22R3P5), versions earlier than 10.1.0.126(C636E5R3P4), versions earlier than 10.1.0.160(C00E160R2P11); versions earlier than 10.1.0.126(C185E8R5P1), versions earlier than 10.1.0.126(C636E9R2P4), versions earlier than 10.1.0.160(C00E160R2P8); versions earlier than 10.0.0.179(C636E3R4P3), versions earlier than 10.0.0.180(C185E3R3P3), versions earlier than 10.0.0.180(C432E10R3P4), versions earlier than 10.0.0.181(C675E5R1P2) have an out of bound read vulnerability. The software reads data past the end of the intended buffer. The attacker tricks the user into installing a crafted application, successful exploit may cause information disclosure or service abnormal.

Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Honor View 20 Firmware Version < 10.0.0.179\(c636e3r4p3\)
   Huawei ≫ Honor View 20 Version-
Huawei ≫ Honor View 20 Firmware Version < 10.0.0.180\(c185e3r3p3\)
   Huawei ≫ Honor View 20 Version-
Huawei ≫ Honor View 20 Firmware Version < 10.0.0.180\(c432e10r3p4\)
   Huawei ≫ Honor View 20 Version-
Huawei ≫ Honor View 20 Firmware Version < 10.0.0.188\(c00e62r2p11\)
   Huawei ≫ Honor View 20 Version-
Huawei ≫ Honor 20 Firmware Version < 10.0.0.187\(c00e60r4p11\)
   Huawei ≫ Honor 20 Version-
Huawei ≫ Honor 20 Pro Firmware Version < 10.0.0.187\(c00e60r4p11\)
   Huawei ≫ Honor 20 Pro Version-
Huawei ≫ Honor Magic2 Firmware Version < 10.0.0.176\(c00e60r2p11\)
   Huawei ≫ Honor Magic2 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.1% 0.25
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.1 1.8 5.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:N/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.