CVE-2020-9095

MEDIUM

HUAWEI P30 Pro Firmware < 10.1.0.160(C00E160R2P8) - Integer Overflow via Malicious Message

Title source: llm
STIX 2.1

Description

HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160(C00E160R2P8) has an integer overflow vulnerability. Some functions are lack of verification when they process some messages sent from other module. Attackers can exploit this vulnerability by send malicious message to cause integer overflow. This can compromise normal service.

References (1)

Core 1

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 6.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-190
Status published
Products (1)
huawei/p30_pro_firmware < 10.1.0.160\(c00e160r2p8\)
Published Aug 21, 2020
Tracked Since Feb 18, 2026