CVE-2020-9117

🗓️ 01 Dec 2020 00:02:54Reported by huaweiType

HUAWEI nova 4 and SydneyM-AL00 versions earlier than 10.0.0.165(C01E34R2P4) and 10.0.0.165(C00E66R1P5) have an out-of-bounds read and write vulnerability.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-9117	1 Dec 202007:53	–	circl
CNNVD	多款Huawei产品缓冲区错误漏洞	25 Nov 202000:00	–	cnnvd
CNVD	Huawei nova 4 and Huawei Sydneym-al00 out-of-bounds read vulnerability	30 Nov 202000:00	–	cnvd
Cvelist	CVE-2020-9117	1 Dec 202000:02	–	cvelist
EUVD	EUVD-2020-29946	7 Oct 202500:30	–	euvd
Huawei	Security Advisory - Out-of-bounds Read Vulnerability in Some Huawei Smartphones	25 Nov 202000:00	–	huawei
NVD	CVE-2020-9117	1 Dec 202001:15	–	nvd
Prion	Design/Logic Flaw	1 Dec 202001:15	–	prion
RedhatCVE	CVE-2020-9117	22 May 202517:35	–	redhatcve

NVD

Vulners

Node

huawei nova_4_firmwareRange<10.0.0.165(c01e34r2p4)

AND

huawei nova_4Match-

Node

huawei sydneym-al00_firmwareRange<10.0.0.165(c00e66r1p5)

AND

huawei sydneym-al00Match-

[
  {
    "product": "HUAWEI nova 4;SydneyM-AL00",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than 10.0.0.165(C01E34R2P4)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 10.0.0.165(C00E66R1P5)"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20201125-01-outofboundread-en

21 Nov 2024 05:40Current

7.8High risk

Vulners AI Score7.8

CVSS 24.6

CVSS 3.17.8

EPSS0.0003

cve-2020-9117 huawei nova 4 sydneym-al00 vulnerability out-of-bounds information leakage arbitrary code execution nvd