CVE-2020-9257

Name of the Vulnerable Software and Affected Versions HUAWEI P30 Pro versions prior to 10.1.0.123(C432E19R2P5patch02) HUAWEI P30 Pro versions prior to 10.1.0.126(C10E11R5P1) HUAWEI P30 Pro versions prior to 10.1.0.160(C00E160R2P8)

Description The issue is related to a buffer overflow when handling certain certificate operations. This occurs because the software accesses data past the end, or before the beginning, of the intended buffer. An attacker could exploit this by tricking a user into installing a malicious application, potentially leading to code execution.

Recommendations For versions prior to 10.1.0.123(C432E19R2P5patch02), update to version 10.1.0.123(C432E19R2P5patch02) or later. For versions prior to 10.1.0.126(C10E11R5P1), update to version 10.1.0.126(C10E11R5P1) or later. For versions prior to 10.1.0.160(C00E160R2P8), update to version 10.1.0.160(C00E160R2P8) or later.