There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
HONOR 20 PRO
Vendor
Huawei
Product
HONOR 20 PRO
Platforms
Unknown
Default status
Unknown
HONOR 20 PRO · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
10.1.0.230(C432E9R5P1)
Unavailable
None listed
unspecified
affected
custom
10.1.0.231(C10E3R3P2)
Unavailable
None listed
HUAWEI Mate 20
Vendor
Huawei
Product
HUAWEI Mate 20
Platforms
Unknown
Default status
Unknown
HUAWEI Mate 20 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
10.1.0.160(C00E160R3P8)
Unavailable
None listed
HUAWEI Mate 20 Pro
Vendor
Huawei
Product
HUAWEI Mate 20 Pro
Platforms
Unknown
Default status
Unknown
HUAWEI Mate 20 Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
10.1.0.270(C432E7R1P5)
Unavailable
None listed
unspecified
affected
custom
10.1.0.270(C635E3R1P5)
Unavailable
None listed
unspecified
affected
custom
10.1.0.273(C185E7R2P4)
Unavailable
None listed
unspecified
affected
custom
10.1.0.273(C636E7R2P4)
Unavailable
None listed
unspecified
affected
custom
10.1.0.277(C10E7R2P4)
Unavailable
None listed
unspecified
affected
custom
10.1.0.277(C605E7R1P5)
Unavailable
None listed
HUAWEI Mate 20 X
Vendor
Huawei
Product
HUAWEI Mate 20 X
Platforms
Unknown
Default status
Unknown
HUAWEI Mate 20 X · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
10.1.0.160(C00E160R2P8)
Unavailable
None listed
HUAWEI P30
Vendor
Huawei
Product
HUAWEI P30
Platforms
Unknown
Default status
Unknown
HUAWEI P30 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
9.1.0.272(C635E4R2P2)
affected
Unavailable
Unavailable
Unavailable
None listed
unspecified
affected
custom
10.1.0.123(C432E22R2P5)
Unavailable
None listed
unspecified
affected
custom
10.1.0.126(C10E7R5P1)
Unavailable
None listed
unspecified
affected
custom
10.1.0.126(C185E4R7P1)
Unavailable
None listed
unspecified
affected
custom
10.1.0.126(C605E19R1P3)
Unavailable
None listed
unspecified
affected
custom
10.1.0.126(C636E5R3P4)
Unavailable
None listed
unspecified
affected
custom
10.1.0.126(C636E7R3P4)
Unavailable
None listed
HUAWEI P30 Pro
Vendor
Huawei
Product
HUAWEI P30 Pro
Platforms
Unknown
Default status
Unknown
HUAWEI P30 Pro · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
10.1.0.160(C00E160R2P8)
Unavailable
None listed
Hima-L29C
Vendor
Huawei
Product
Hima-L29C
Platforms
Unknown
Default status
Unknown
Hima-L29C · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
10.1.0.273(C185E5R2P4)
Unavailable
None listed
unspecified
affected
custom
10.1.0.273(C636E5R2P4)
Unavailable
None listed
unspecified
affected
custom
10.1.0.275(C10E4R2P4)
Unavailable
None listed
Laya-AL00EP
Vendor
Huawei
Product
Laya-AL00EP
Platforms
Unknown
Default status
Unknown
Laya-AL00EP · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
10.1.0.160(C786E160R3P8)
Unavailable
None listed
Princeton-AL10B
Vendor
Huawei
Product
Princeton-AL10B
Platforms
Unknown
Default status
Unknown
Princeton-AL10B · Scoped product and version facts