Read the docs
TI-2020-01800 Aliases CVE-2020-1872GHSA-6q93-673p-9879

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier…

Priority LOW 21Published · Updated

Key facts

Attack vector
Physical
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8), earlier than 9.1.0.252(C432E4R1P9T8), and earlier than 9.1.0.255(C576E6R1P8T8) have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance mode, an attacker can perform some operations to bypass the startup wizard, and then open some switch. As a result, the digital balance function is bypassed.

Why it matters now

EPSS 0.00214 11th percentileScored 2026-11-07
Fix Fixed HUAWEI P10 Plus (Huawei): 9.1.0.201(C01E75R1P12T8), 9.1.0.252(C185E2R1P9T8), 9.1.0.252(C432E4R1P9T8) +1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HuaweiHUAWEI P10 Plusbefore 9.1.0.201(C01E75R1P12T8); before 9.1.0.252(C185E2R1P9T8); before 9.1.0.252(C432E4R1P9T8); before 9.1.0.255(C576E6R1P8T8)9.1.0.201(C01E75R1P12T8), 9.1.0.252(C185E2R1P9T8), 9.1.0.252(C432E4R1P9T8), 9.1.0.255(C576E6R1P8T8)Patch availableCNA
  • HUAWEI P10 Plus VendorHuawei Affected before 9.1.0.201(C01E75R1P12T8); before 9.1.0.252(C185E2R1P9T8); before 9.1.0.252(C432E4R1P9T8); before 9.1.0.255(C576E6R1P8T8) Fixed in 9.1.0.201(C01E75R1P12T8), 9.1.0.252(C185E2R1P9T8), 9.1.0.252(C432E4R1P9T8), 9.1.0.255(C576E6R1P8T8) Patch available CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*before 9.1.0.201\(c01e75r1p12t8\)VulnerableHuawei
cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*before 9.1.0.252\(c185e2r1p9t8\); before 9.1.0.252\(c432e4r1p9t8\); before 9.1.0.255\(c576e6r1p8t8\)VulnerableHuawei
  • cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.201\(c01e75r1p12t8\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.252\(c185e2r1p9t8\); before 9.1.0.252\(c432e4r1p9t8\); before 9.1.0.255\(c576e6r1p8t8\) Vulnerable ·Huawei

Remediation

  • Fix · CNA HUAWEI P10 Plus (Huawei) Fixed in 9.1.0.201(C01E75R1P12T8), 9.1.0.252(C185E2R1P9T8), 9.1.0.252(C432E4R1P9T8), 9.1.0.255(C576E6R1P8T8)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-1872
  2. 2026-10-03 Alias added: GHSA-6q93-673p-9879

References

Advisory 1

  • TI-2017-01968 Memory corruption in Huawei P10 Plus,P10 CVSS 3.0HIGH 8.4
  • TI-2017-01966 Memory corruption in Huawei P10 Plus,P10 CVSS 3.0HIGH 8.4
  • TI-2017-01967 Memory corruption in Huawei P10 Plus,P10 CVSS 3.0HIGH 7.8
  • TI-2017-05725 Memory corruption in Huawei P10, P10 Plus CVSS 3.0HIGH 7.8
  • TI-2017-05716 Double free in Huawei P10 Plus CVSS 3.0HIGH 7.8
  • TI-2017-05790 Honor 8,Honor V8,Honor 9,Honor V9,Nova 2,Nova 2 Plus,P9,P10 Plus,Toronto Huawei smart… CVSS 3.0MEDIUM 6.2
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences