CVE-2020-9104

Published: Aug 21, 2020Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

HUAWEI P30 smartphones with Versions earlier than 10.1.0.123(C431E22R2P5),Versions earlier than 10.1.0.123(C432E22R2P5),Versions earlier than 10.1.0.126(C10E7R5P1),Versions earlier than 10.1.0.126(C185E4R7P1),Versions earlier than 10.1.0.126(C461E7R3P1),Versions earlier than 10.1.0.126(C605E19R1P3),Versions earlier than 10.1.0.126(C636E7R3P4),Versions earlier than 10.1.0.128(C635E3R2P4),Versions earlier than 10.1.0.160(C00E160R2P11),Versions earlier than 10.1.0.160(C01E160R2P11) have a denial of service vulnerability. In specific scenario, due to the improper resource management and memory leak of some feature, the attacker could exploit this vulnerability to cause the device reset.

Affected (10)

Products: Huawei: P30 Firmware

Huawei

1 product

P30 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.1.0.123\(c431e22r2p5\)

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.1.0.123\(c432e22r2p5\)

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.1.0.126\(c10e7r5p1\)

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.1.0.126\(c185e4r7p1\)

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.1.0.126\(c461e7r3p1\)

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.1.0.126\(c605e19r1p3\)

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.1.0.126\(c636e7r3p4\)

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.1.0.128\(c635e3r2p4\)

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.1.0.160\(c00e160r2p11\)

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P30 Firmware	Before 10.1.0.160\(c01e160r2p11\)

Running on/with	Platform Versions
Huawei P30	All versions

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (2)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphonedos-en

Source: psirt@huawei.com

Vendor Advisory

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphonedos-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.