Paper/Archive/CVE-2020-9144

CVE-2020-9144

huawei — There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to…

EPSS 0.8%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 57.1.571 × 2011.4 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to improper restriction of operations within the bounds of a memory buffer.

Affected

ProductAffectedFixed inSource

EMUIEMUI 11.0.0–CNA

EMUIEMUI 10.1.1–CNA

EMUIEMUI 10.1.0–CNA

EMUIEMUI 10.0.0–CNA

EMUIEMUI 9.1.1–CNA

EMUIEMUI 9.1.0–CNA

Magic UIMagic UI 4.0.0–CNA

Magic UIMagic UI 3.1.1–CNA

Magic UIMagic UI 3.1.0–CNA

Magic UIMagic UI 3.0.0–CNA

Magic UIMagic UI 2.1.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refconsumer.huawei.com/en/support/bulletin/2020/12