CVE-2020-9142

CRITICAL

Huawei EMUI and Magic UI - Heap-Based Buffer Overflow via Update File Processing

Title source: llm
STIX 2.1

Description

There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly processes the update file.

References (1)

Core 1
Core References

Scores

CVSS v3 9.1
EPSS 0.0020
EPSS Percentile 41.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Details

CWE
CWE-787
Status published
Products (11)
huawei/emui 9.1.0
huawei/emui 9.1.1
huawei/emui 10.0.0
huawei/emui 10.1.0
huawei/emui 10.1.1
huawei/emui 11.0.0
huawei/magic_ui 2.1.1
huawei/magic_ui 3.0.0
huawei/magic_ui 3.1.0
huawei/magic_ui 3.1.1
... and 1 more
Published Jan 13, 2021
Tracked Since Feb 18, 2026