Read the docs
TI-2020-07287 Aliases CVE-2020-9074GHSA-cj2v-hvhw-frjw

Improper handling of exceptional conditions in HONOR 20 PRO

Priority LOW 25CWE-755Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot deal with an exception correctly. Attackers can exploit this vulnerability by sending malformed message. This could compromise normal service of affected phones.

Why it matters now

EPSS 0.00733 54th percentileScored 2026-11-07
Fix Fixed HONOR 20 PRO: 10.0.0.194(C432E9R5P1), 10.0.0.194(C636E3R3P1), 10.0.0.194(C00E62R8P12) +1Honor View 20: 10.0.0.200(C185E3R3P3), 10.0.0.201(C636E3R4P3), 10.0.0.195(C00E62R4P11) +1+1 more product

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—HONOR 20 PRObefore 10.0.0.194(C432E9R5P1); before 10.0.0.194(C636E3R3P1); before 10.0.0.194(C00E62R8P12); before 10.0.0.194(C10E3R3P2)10.0.0.194(C432E9R5P1), 10.0.0.194(C636E3R3P1), 10.0.0.194(C00E62R8P12), 10.0.0.194(C10E3R3P2)Patch availableCNA
—Honor View 20before 10.0.0.200(C185E3R3P3); before 10.0.0.201(C636E3R4P3); before 10.0.0.195(C00E62R4P11); before 10.0.0.201(C10E5R4P3)10.0.0.200(C185E3R3P3), 10.0.0.201(C636E3R4P3), 10.0.0.195(C00E62R4P11), 10.0.0.201(C10E5R4P3)Patch availableCNA
—HONOR 20before 10.0.0.186(C185E2R2P1); before 10.0.0.194(C432E9R5P1)10.0.0.186(C185E2R2P1), 10.0.0.194(C432E9R5P1)Patch availableCNA
  • HONOR 20 PRO Vendor— Affected before 10.0.0.194(C432E9R5P1); before 10.0.0.194(C636E3R3P1); before 10.0.0.194(C00E62R8P12); before 10.0.0.194(C10E3R3P2) Fixed in 10.0.0.194(C432E9R5P1), 10.0.0.194(C636E3R3P1), 10.0.0.194(C00E62R8P12), 10.0.0.194(C10E3R3P2) Patch available CNA
  • Honor View 20 Vendor— Affected before 10.0.0.200(C185E3R3P3); before 10.0.0.201(C636E3R4P3); before 10.0.0.195(C00E62R4P11); before 10.0.0.201(C10E5R4P3) Fixed in 10.0.0.200(C185E3R3P3), 10.0.0.201(C636E3R4P3), 10.0.0.195(C00E62R4P11), 10.0.0.201(C10E5R4P3) Patch available CNA
  • HONOR 20 Vendor— Affected before 10.0.0.186(C185E2R2P1); before 10.0.0.194(C432E9R5P1) Fixed in 10.0.0.186(C185E2R2P1), 10.0.0.194(C432E9R5P1) Patch available CNA

CPE configurations NVD · 9

CPEVersionsRoleVendor
cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:*before 10.0.0.194\(c432e9r5p1\)VulnerableHuawei
cpe:2.3:h:huawei:honor_20_pro:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:*before 10.0.0.194\(c636e3r3p1\); before 10.0.0.194\(c00e62r8p12\); before 10.0.0.194\(c10e3r3p2\)VulnerableHuawei
cpe:2.3:o:huawei:honor_view_20_firmware:*:*:*:*:*:*:*:*before 10.0.0.200\(c185e3r3p3\)VulnerableHuawei
cpe:2.3:h:huawei:honor_view_20:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:honor_view_20_firmware:*:*:*:*:*:*:*:*before 10.0.0.201\(c636e3r4p3\); before 10.0.0.195\(c00e62r4p11\); before 10.0.0.201\(c10e5r4p3\)VulnerableHuawei
cpe:2.3:o:huawei:honor_20_firmware:*:*:*:*:*:*:*:*before 10.0.0.186\(c185e2r2p1\)VulnerableHuawei
cpe:2.3:h:huawei:honor_20:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:honor_20_firmware:*:*:*:*:*:*:*:*before 10.0.0.194\(c432e9r5p1\)VulnerableHuawei
  • cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.0.0.194\(c432e9r5p1\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:honor_20_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.0.0.194\(c636e3r3p1\); before 10.0.0.194\(c00e62r8p12\); before 10.0.0.194\(c10e3r3p2\) Vulnerable ·Huawei
  • cpe:2.3:o:huawei:honor_view_20_firmware:*:*:*:*:*:*:*:* Versions before 10.0.0.200\(c185e3r3p3\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:honor_view_20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:honor_view_20_firmware:*:*:*:*:*:*:*:* Versions before 10.0.0.201\(c636e3r4p3\); before 10.0.0.195\(c00e62r4p11\); before 10.0.0.201\(c10e5r4p3\) Vulnerable ·Huawei
  • cpe:2.3:o:huawei:honor_20_firmware:*:*:*:*:*:*:*:* Versions before 10.0.0.186\(c185e2r2p1\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:honor_20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:honor_20_firmware:*:*:*:*:*:*:*:* Versions before 10.0.0.194\(c432e9r5p1\) Vulnerable ·Huawei

Remediation

  • Fix · CNA HONOR 20 PRO Fixed in 10.0.0.194(C432E9R5P1), 10.0.0.194(C636E3R3P1), 10.0.0.194(C00E62R8P12), 10.0.0.194(C10E3R3P2)
  • Fix · CNA Honor View 20 Fixed in 10.0.0.200(C185E3R3P3), 10.0.0.201(C636E3R4P3), 10.0.0.195(C00E62R4P11), 10.0.0.201(C10E5R4P3)
  • Fix · CNA HONOR 20 Fixed in 10.0.0.186(C185E2R2P1), 10.0.0.194(C432E9R5P1)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-9074
  2. 2026-10-03 Alias added: GHSA-cj2v-hvhw-frjw

References

Advisory 1

  • TI-2019-06941 Cryptographic flaw in Bluetooth BR/EDR CVSS 3.1HIGH 8.1
  • TI-2020-01746 Out-of-bounds read in Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI… CVSS 3.1HIGH 7.1
  • TI-2020-07385 HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro… CVSS 3.1MEDIUM 6.8
  • TI-2019-03732 Improper input validation in Huawei ALP-AL00B CVSS 3.1MEDIUM 5.3
  • TI-2019-03731 Improper input validation in Huawei Sydney-L21 CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences