Search/CVE-2020-9247
● CVE — High

CVE-2020-9247

VendorhuaweiProductmate 20 firmware, p30 firmware, p30 pro firmware, mate 20 x firmware, hima-l29c firmware, mate 20 pro firmware, honor 20 pro firmware, tony-al00b firmware, princeton-al10b firmware, yale-l61a firmware, laya-al00ep firmware, yale-tl00b firmware, yalep-al10b firmwareDiscoveredDec 7, 2020UpdatedNov 21, 2024

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.

CVSS v3.1
7.8 HIGH
EPSS
0.83%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 2, 2026
▲ 0.03pp
0.79% → 0.83% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionREQUIRED
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Connections
14 relationships
Timeline
disclosure → media coverage
Dec 7, 2020
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024