Read the docs
TI-2020-01730 Aliases CVE-2020-1792GHSA-838v-88q9-7fmf

Out-of-bounds write in Honor V10

Priority LOW 25CWE-787Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.

Summary

Honor V10 smartphones with versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4) and versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) have an out of bounds write vulnerability. The software writes data past the end of the intended buffer because of insufficient validation of certain parameter when initializing certain driver program. An attacker could trick the user into installing a malicious application, successful exploit could cause the device to reboot.

Why it matters now

EPSS 0.00478 41st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Honor V10Versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4),Versions earlier than BKL-L09 10.0.0.146(C432E4R1P4)—No fix listedCNA
  • Honor V10 Vendor— Affected Versions earlier than BKL-AL20 10.0.0.156(C00E156R2P4),Versions earlier than BKL-L09 10.0.0.146(C432E4R1P4) Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:o:huawei:honor_v10_firmware:*:*:*:*:*:*:*:*before bkl-al20_10.0.0.156\(c00e156r2p4\)VulnerableHuawei
cpe:2.3:h:huawei:honor_v10:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:honor_v10_firmware:*:*:*:*:*:*:*:*before bkl-l09_10.0.0.146\(c432e4r1p4\)VulnerableHuawei
  • cpe:2.3:o:huawei:honor_v10_firmware:*:*:*:*:*:*:*:* Versions before bkl-al20_10.0.0.156\(c00e156r2p4\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:honor_v10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:honor_v10_firmware:*:*:*:*:*:*:*:* Versions before bkl-l09_10.0.0.146\(c432e4r1p4\) Vulnerable ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1792
  2. 2026-10-03 Alias added: GHSA-838v-88q9-7fmf

References

Advisory 1

  • TI-2020-01744 Out-of-bounds read in Huawei Honor V10 CVSS 3.1HIGH 7.1
  • TI-2020-01743 Out-of-bounds read in Huawei Honor V10 CVSS 3.1HIGH 7.1
  • TI-2020-01742 Out-of-bounds read in Huawei Honor V10 CVSS 3.1HIGH 7.1
  • TI-2019-03683 Path traversal in Honor V10;P30;Mate 20;Honor 9 Lite;Honor 9i;M6;P30 Pro;Honor 20s CVSS 3.1MEDIUM 5.5
  • TI-2020-01723 Mate 10 Pro;Honor V10;Honor 10;Nova 4 smartphones have a denial of service vulnerability. CVSS 3.1MEDIUM 5.5
  • TI-2019-03694 There is an information disclosure vulnerability in certain Huawei smartphones (Mate… CVSS 3.1MEDIUM 4.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences