Skip to content
OpenAdvisories
Low · 3.3 CVE-2020-9089 EUVD-2020-29918GHSA-p4pq-33vh-rcmg

There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. At…

Published Dec 27, 2024 · Updated Dec 27, 2024 · Assigned by huawei

Description

There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Attackers with user access can exploit this vulnerability to obtain some information. This can lead to information leak. (Vulnerability ID: HWPSIRT-2019-12141)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9089.

Affected products

VendorProductAffectedFixed
Huawei HUAWEI P30 Pro Versions earlier than 10.1.0.120(C431E19R2P5), Versions earlier than 10.1.0.120(C432E19R2P5), Versions earlier than 10.1.0.126(C10E11R5P1), Versions earlier than 10.1.0.126(C461E11R3P1) —

References