CVE-2020-9107
Medium
Description
HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have an out-of-bounds read and write vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the process reboot.
SeverityMedium
CVSS5.5
Exploit probability—
ProductHuawei P30 Pro Firmware
PublishedOct 12, 2020
First seenOct 12, 2020
How to fix
Update
- huawei p30_pro_firmware10.1.0.160\(c00e160r2p8\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei p30_pro_firmware | v < 10.1.0.160\(c00e160r2p8\) | 10.1.0.160\(c00e160r2p8\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.