VULNERABILITY INTELLIGENCE
CVE-2020-9113
CVSS score8 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2020-10-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
HUAWEI Mate 20 versions earlier than 10.0.0.188(C00E74R3P8) have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth messages after successful paring, causing buffer overflow. Successful exploit may cause code execution.
Weakness classification
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory