1. Home
  2. CVE Database
  3. CVE-2020-9142
CRITICAL · 9.1

CVE-2020-9142

There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly pr...

Vulnerability Description

There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly processes the update file.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
HuaweiEmui9.1.0
HuaweiMagic Ui2.1.1

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2020-9142?

CVE-2020-9142 is a vulnerability with a CVSS score of 9.1 (CRITICAL). There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap overflow and memory overwriting when the system incorrectly pr...

How severe is CVE-2020-9142?

CVE-2020-9142 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-9142?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Emui, Huawei Magic Ui.