Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-9258

No fix known EPSS <1%

HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerability. An attribution in a module is not set correctly and some verification is lacked. Attackers with local access can exploit this vulnerability by injecting malicious fragment. This may lead to user information leak.

Published 2020-07-10 · CVE record · OSV

Products: huawei p30_firmware