5.5

CVE-2020-9146

A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to cause memory leakage and doS attacks by carefully constructing attack scenarios.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Emui Version 10.0.0
Huawei ≫ Emui Version 10.1.0
Huawei ≫ Emui Version 10.1.1
Huawei ≫ Emui Version 11.0.0
Huawei ≫ Magic Ui Version 3.0.0
Huawei ≫ Magic Ui Version 3.1.0
Huawei ≫ Magic Ui Version 3.1.1
Huawei ≫ Magic Ui Version 4.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.15% 0.044
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NIST 1.9 3.4 2.9
AV:L/AC:M/Au:N/C:N/I:N/A:P
CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

https://consumer.huawei.com/cn/support/bulletin/2021/1
Vendor Advisory