High severity · published Apr 27, 2020
CVE-2020-1805
Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities
7.1
CVSS
0.6%
EPSS
No
On KEV
Description
Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 2 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1804 and CVE-2020-1806.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HV
Honor V10 Firmware · Huawei
before 10.0.0.156\(c00e156r2p4\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-1805
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-1805
Vendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-02-smartphone-en
More from Honor V10 Firmware
7.1
CVE-2020-1806
Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities
7.1
CVE-2020-1804
Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities
5.5
CVE-2020-1792
Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write…
5.5
CVE-2020-1785
Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability
5.5
CVE-2019-5251
There is a path traversal vulnerability in several Huawei smartphones