CVE-2020-9254 - HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a logic check error vulnerability

Back Back to CVE browser

HIGH

HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a logic check error vulnerability

Published Jul 17, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.88%

Description

HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E19R2P5patch02), versions earlier than 10.1.0.126(C10E11R5P1), and versions earlier than 10.1.0.160(C00E160R2P8) have a logic check error vulnerability. A logic error occurs when the software checking the size of certain parameter, the attacker should trick the user into installing a malicious application, successful exploit may cause code execution.

Affected products

Vendor Huawei Product HUAWEI P30 Pro Default
n/a
- Version
  Versions earlier than 10.1.0.123(C432E19R2P5patch02)
  Status
  affected
  Constraints
  -
- Version
  Versions earlier than 10.1.0.126(C10E11R5P1)
  Status
  affected
  Constraints
  -
- Version
  Versions earlier than 10.1.0.160(C00E160R2P8)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Huawei

HUAWEI P30 Pro

n/a

Version	Status	Constraints
Versions earlier than 10.1.0.123(C432E19R2P5patch02)	affected	-
Versions earlier than 10.1.0.126(C10E11R5P1)	affected	-
Versions earlier than 10.1.0.160(C00E160R2P8)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (1)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-04-smartphone-en
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200715-04-smartphone-en		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Jul 17, 2020

Updated Aug 4, 2024

Reserved Feb 18, 2020

Link CVE-2020-9254

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9254

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-9254