VULNERABILITY INTELLIGENCE

CVE-2020-9125

CVSS score6.7 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2020-12-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with specific permission can exploit this vulnerability by sending crafted packet with specific parameter to the target device. Due to insufficient validation of the parameter, successful exploit can cause the device to behave abnormally.

Weakness classification

  • nvd@nist.gov: CWE-125

Primary references