5.5

CVE-2020-9146

A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to cause memory leakage and doS attacks by carefully constructing attack scenarios.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Emui Version10.0.0
Huawei ≫ Emui Version10.1.0
Huawei ≫ Emui Version10.1.1
Huawei ≫ Emui Version11.0.0
Huawei ≫ Magic Ui Version3.0.0
Huawei ≫ Magic Ui Version3.1.0
Huawei ≫ Magic Ui Version3.1.1
Huawei ≫ Magic Ui Version4.0.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.031
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 1.9 3.4 2.9
AV:L/AC:M/Au:N/C:N/I:N/A:P
CWE-772 Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.