Read the docs
TI-2020-07368 Aliases CVE-2020-9223GHSA-m36c-qvvp-5mjx

There is a denial of service vulnerability in some Huawei smartphones.

Priority LOW 35Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote attackers may exploit this vulnerability to cause a denial of service (DoS) on the specific module.

Why it matters now

EPSS 0.00888 59th percentileScored 2026-11-07
Fix Fixed HONOR 20 PRO: 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2), 10.1.0.231(C185E3R5P1) +1Princeton-AL10D: 10.1.0.168(C00E166R4P11)+2 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—HONOR 20 PRObefore 10.1.0.230(C432E9R5P1); before 10.1.0.231(C10E3R3P2); before 10.1.0.231(C185E3R5P1); before 10.1.0.231(C636E3R3P1)10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2), 10.1.0.231(C185E3R5P1), 10.1.0.231(C636E3R3P1)Patch availableCNA
—Princeton-AL10Dbefore 10.1.0.168(C00E166R4P11)10.1.0.168(C00E166R4P11)Patch availableCNA
—Yale-L21Abefore 10.1.0.230(C432E9R5P1); before 10.1.0.231(C10E3R3P2); before 10.1.0.231(C185E2R2P1); before 10.1.0.231(C636E3R3P1)10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2), 10.1.0.231(C185E2R2P1), 10.1.0.231(C636E3R3P1)Patch availableCNA
—Yale-L61Abefore 10.1.0.225(C432E3R1P2); before 10.1.0.226(C10E3R1P1)10.1.0.225(C432E3R1P2), 10.1.0.226(C10E3R1P1)Patch availableCNA
  • HONOR 20 PRO Vendor— Affected before 10.1.0.230(C432E9R5P1); before 10.1.0.231(C10E3R3P2); before 10.1.0.231(C185E3R5P1); before 10.1.0.231(C636E3R3P1) Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2), 10.1.0.231(C185E3R5P1), 10.1.0.231(C636E3R3P1) Patch available CNA
  • Princeton-AL10D Vendor— Affected before 10.1.0.168(C00E166R4P11) Fixed in 10.1.0.168(C00E166R4P11) Patch available CNA
  • Yale-L21A Vendor— Affected before 10.1.0.230(C432E9R5P1); before 10.1.0.231(C10E3R3P2); before 10.1.0.231(C185E2R2P1); before 10.1.0.231(C636E3R3P1) Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2), 10.1.0.231(C185E2R2P1), 10.1.0.231(C636E3R3P1) Patch available CNA
  • Yale-L61A Vendor— Affected before 10.1.0.225(C432E3R1P2); before 10.1.0.226(C10E3R1P1) Fixed in 10.1.0.225(C432E3R1P2), 10.1.0.226(C10E3R1P1) Patch available CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:*before 10.1.0.230\(c432e9r5p1\)VulnerableHuawei
cpe:2.3:h:huawei:honor_20_pro:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:*before 10.1.0.231\(c10e3r3p2\); before 10.1.0.231\(c185e3r5p1\); before 10.1.0.231\(c636e3r3p1\)VulnerableHuawei
cpe:2.3:o:huawei:princeton-al10d_firmware:*:*:*:*:*:*:*:*before 10.1.0.168\(c00e166r4p11\)VulnerableHuawei
cpe:2.3:h:huawei:princeton-al10d:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:yale-l21a_firmware:*:*:*:*:*:*:*:*before 10.1.0.230\(c432e9r5p1\)VulnerableHuawei
cpe:2.3:h:huawei:yale-l21a:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:yale-l21a_firmware:*:*:*:*:*:*:*:*before 10.1.0.231\(c10e3r3p2\); before 10.1.0.231\(c185e2r2p1\); before 10.1.0.231\(c636e3r3p1\)VulnerableHuawei
cpe:2.3:o:huawei:yale-l61a_firmware:*:*:*:*:*:*:*:*before 10.1.0.225\(c432e3r1p2\)VulnerableHuawei
cpe:2.3:h:huawei:yale-l61a:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.230\(c432e9r5p1\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:honor_20_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.231\(c10e3r3p2\); before 10.1.0.231\(c185e3r5p1\); before 10.1.0.231\(c636e3r3p1\) Vulnerable ·Huawei
  • cpe:2.3:o:huawei:princeton-al10d_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.168\(c00e166r4p11\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:princeton-al10d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:yale-l21a_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.230\(c432e9r5p1\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:yale-l21a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:yale-l21a_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.231\(c10e3r3p2\); before 10.1.0.231\(c185e2r2p1\); before 10.1.0.231\(c636e3r3p1\) Vulnerable ·Huawei
  • cpe:2.3:o:huawei:yale-l61a_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.225\(c432e3r1p2\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:yale-l61a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:huawei:yale-l61a_firmware:*:*:*:*:*:*:*:*before 10.1.0.226\(c10e3r1p1\)VulnerableHuawei
  • cpe:2.3:o:huawei:yale-l61a_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.226\(c10e3r1p1\) Vulnerable ·Huawei

Remediation

  • Fix · CNA HONOR 20 PRO Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2), 10.1.0.231(C185E3R5P1), 10.1.0.231(C636E3R3P1)
  • Fix · CNA Princeton-AL10D Fixed in 10.1.0.168(C00E166R4P11)
  • Fix · CNA Yale-L21A Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2), 10.1.0.231(C185E2R2P1), 10.1.0.231(C636E3R3P1)
  • Fix · CNA Yale-L61A Fixed in 10.1.0.225(C432E3R1P2), 10.1.0.226(C10E3R1P1)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-9223
  2. 2026-10-03 Alias added: GHSA-m36c-qvvp-5mjx

References

Advisory 1

  • TI-2020-00067 Out-of-bounds write in Android KEVCVSS 3.1HIGH 7.8
  • TI-2019-06941 Cryptographic flaw in Bluetooth BR/EDR CVSS 3.1HIGH 8.1
  • TI-2020-07388 Buffer overflow in Huawei HONOR 20 PRO CVSS 3.1HIGH 7.8
  • TI-2020-01746 Out-of-bounds read in Honor 20;HONOR 20 PRO;Honor Magic2;HUAWEI Mate 20 X;HUAWEI… CVSS 3.1HIGH 7.1
  • TI-2020-07385 HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro… CVSS 3.1MEDIUM 6.8
  • TI-2020-07287 Improper handling of exceptional conditions in HONOR 20 PRO CVSS 3.1MEDIUM 5.3
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences