Medium severity · published Feb 28, 2020
CVE-2020-1792
Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write…
5.5
CVSS
0.5%
EPSS
No
On KEV
Description
Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter when initializing certain driver program. An attacker could trick the user into installing a malicious application, successful exploit could cause the device to reboot.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HV
Honor V10 Firmware · Huawei
before bkl-al20_10.0.0.156\(c00e156r2p4\); before bkl-l09_10.0.0.146\(c432e4r1p4\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-1792
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-1792
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200226-01-smartphone-en
More from Honor V10 Firmware
7.1
CVE-2020-1806
Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities
7.1
CVE-2020-1805
Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities
7.1
CVE-2020-1804
Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities
5.5
CVE-2020-1785
Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability
5.5
CVE-2019-5251
There is a path traversal vulnerability in several Huawei smartphones