Security Advisory - Race Condition Vulnerability in Several Smartphones

There is a race condition vulnerability in several smartphones. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution. (Vulnerability ID: HWPSIRT-2020-02159)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-1839.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-04-smartphone-en