Read the docs
TI-2020-07388 Aliases CVE-2020-9247GHSA-c423-vwh6-449m

Buffer overflow in Huawei HONOR 20 PRO

Priority LOW 36CWE-120Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.

Why it matters now

EPSS 0.00828 57th percentileScored 2026-11-07
Fix Fixed HONOR 20 PRO (Huawei): 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2)HUAWEI Mate 20 (Huawei): 10.1.0.160(C00E160R3P8)+11 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HuaweiHONOR 20 PRObefore 10.1.0.230(C432E9R5P1); before 10.1.0.231(C10E3R3P2)10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2)Patch availableCNA
HuaweiHUAWEI Mate 20before 10.1.0.160(C00E160R3P8)10.1.0.160(C00E160R3P8)Patch availableCNA
HuaweiHUAWEI Mate 20 Probefore 10.1.0.270(C432E7R1P5); before 10.1.0.270(C635E3R1P5); before 10.1.0.273(C185E7R2P4); before 10.1.0.273(C636E7R2P4); before 10.1.0.277(C10E7R2P4); before 10.1.0.277(C605E7R1P5)10.1.0.270(C432E7R1P5), 10.1.0.270(C635E3R1P5), 10.1.0.273(C185E7R2P4), 10.1.0.273(C636E7R2P4), 10.1.0.277(C10E7R2P4), 10.1.0.277(C605E7R1P5)Patch availableCNA
HuaweiHUAWEI Mate 20 Xbefore 10.1.0.160(C00E160R2P8)10.1.0.160(C00E160R2P8)Patch availableCNA
HuaweiHUAWEI P309.1.0.272(C635E4R2P2); before 10.1.0.123(C432E22R2P5); before 10.1.0.126(C10E7R5P1); before 10.1.0.126(C185E4R7P1); before 10.1.0.126(C605E19R1P3); before 10.1.0.126(C636E5R3P4); before 10.1.0.126(C636E7R3P4)10.1.0.123(C432E22R2P5), 10.1.0.126(C10E7R5P1), 10.1.0.126(C185E4R7P1), 10.1.0.126(C605E19R1P3), 10.1.0.126(C636E5R3P4), 10.1.0.126(C636E7R3P4)Patch availableCNA
HuaweiHUAWEI P30 Probefore 10.1.0.160(C00E160R2P8)10.1.0.160(C00E160R2P8)Patch availableCNA
HuaweiHima-L29Cbefore 10.1.0.273(C185E5R2P4); before 10.1.0.273(C636E5R2P4); before 10.1.0.275(C10E4R2P4)10.1.0.273(C185E5R2P4), 10.1.0.273(C636E5R2P4), 10.1.0.275(C10E4R2P4)Patch availableCNA
HuaweiLaya-AL00EPbefore 10.1.0.160(C786E160R3P8)10.1.0.160(C786E160R3P8)Patch availableCNA
HuaweiPrinceton-AL10Bbefore 10.1.0.160(C00E160R2P11)10.1.0.160(C00E160R2P11)Patch availableCNA
HuaweiTony-AL00Bbefore 10.1.0.160(C00E160R2P11)10.1.0.160(C00E160R2P11)Patch availableCNA
HuaweiYale-L61Abefore 10.1.0.225(C432E3R1P2); before 10.1.0.226(C10E3R1P1)10.1.0.225(C432E3R1P2), 10.1.0.226(C10E3R1P1)Patch availableCNA
HuaweiYale-TL00Bbefore 10.1.0.160(C01E160R8P12)10.1.0.160(C01E160R8P12)Patch availableCNA
HuaweiYaleP-AL10Bbefore 10.1.0.160(C00E160R8P12)10.1.0.160(C00E160R8P12)Patch availableCNA
  • HONOR 20 PRO VendorHuawei Affected before 10.1.0.230(C432E9R5P1); before 10.1.0.231(C10E3R3P2) Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2) Patch available CNA
  • HUAWEI Mate 20 VendorHuawei Affected before 10.1.0.160(C00E160R3P8) Fixed in 10.1.0.160(C00E160R3P8) Patch available CNA
  • HUAWEI Mate 20 Pro VendorHuawei Affected before 10.1.0.270(C432E7R1P5); before 10.1.0.270(C635E3R1P5); before 10.1.0.273(C185E7R2P4); before 10.1.0.273(C636E7R2P4); before 10.1.0.277(C10E7R2P4); before 10.1.0.277(C605E7R1P5) Fixed in 10.1.0.270(C432E7R1P5), 10.1.0.270(C635E3R1P5), 10.1.0.273(C185E7R2P4), 10.1.0.273(C636E7R2P4), 10.1.0.277(C10E7R2P4), 10.1.0.277(C605E7R1P5) Patch available CNA
  • HUAWEI Mate 20 X VendorHuawei Affected before 10.1.0.160(C00E160R2P8) Fixed in 10.1.0.160(C00E160R2P8) Patch available CNA
  • HUAWEI P30 VendorHuawei Affected 9.1.0.272(C635E4R2P2); before 10.1.0.123(C432E22R2P5); before 10.1.0.126(C10E7R5P1); before 10.1.0.126(C185E4R7P1); before 10.1.0.126(C605E19R1P3); before 10.1.0.126(C636E5R3P4); before 10.1.0.126(C636E7R3P4) Fixed in 10.1.0.123(C432E22R2P5), 10.1.0.126(C10E7R5P1), 10.1.0.126(C185E4R7P1), 10.1.0.126(C605E19R1P3), 10.1.0.126(C636E5R3P4), 10.1.0.126(C636E7R3P4) Patch available CNA
  • HUAWEI P30 Pro VendorHuawei Affected before 10.1.0.160(C00E160R2P8) Fixed in 10.1.0.160(C00E160R2P8) Patch available CNA
  • Hima-L29C VendorHuawei Affected before 10.1.0.273(C185E5R2P4); before 10.1.0.273(C636E5R2P4); before 10.1.0.275(C10E4R2P4) Fixed in 10.1.0.273(C185E5R2P4), 10.1.0.273(C636E5R2P4), 10.1.0.275(C10E4R2P4) Patch available CNA
  • Laya-AL00EP VendorHuawei Affected before 10.1.0.160(C786E160R3P8) Fixed in 10.1.0.160(C786E160R3P8) Patch available CNA
  • Princeton-AL10B VendorHuawei Affected before 10.1.0.160(C00E160R2P11) Fixed in 10.1.0.160(C00E160R2P11) Patch available CNA
  • Tony-AL00B VendorHuawei Affected before 10.1.0.160(C00E160R2P11) Fixed in 10.1.0.160(C00E160R2P11) Patch available CNA
  • Yale-L61A VendorHuawei Affected before 10.1.0.225(C432E3R1P2); before 10.1.0.226(C10E3R1P1) Fixed in 10.1.0.225(C432E3R1P2), 10.1.0.226(C10E3R1P1) Patch available CNA
  • Yale-TL00B VendorHuawei Affected before 10.1.0.160(C01E160R8P12) Fixed in 10.1.0.160(C01E160R8P12) Patch available CNA
  • YaleP-AL10B VendorHuawei Affected before 10.1.0.160(C00E160R8P12) Fixed in 10.1.0.160(C00E160R8P12) Patch available CNA

CPE configurations NVD · 31

CPEVersionsRoleVendor
cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:*before 10.1.0.230\(c432e9r5p1\)VulnerableHuawei
cpe:2.3:h:huawei:honor_20_pro:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:mate_20_firmware:*:*:*:*:*:*:*:*before 10.1.0.160\(c00e160r3p8\)VulnerableHuawei
cpe:2.3:h:huawei:mate_20:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:*before 10.1.0.270\(c432e7r1p5\)VulnerableHuawei
cpe:2.3:h:huawei:mate_20_pro:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:mate_20_x_firmware:*:*:*:*:*:*:*:*before 10.1.0.160\(c00e160r2p8\)VulnerableHuawei
cpe:2.3:h:huawei:mate_20_x:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:p30_firmware:9.1.0.272\(c635e4r2p2\):*:*:*:*:*:*:*9.1.0.272(c635e4r2p2)VulnerableHuawei
cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.230\(c432e9r5p1\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:honor_20_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:mate_20_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c00e160r3p8\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:mate_20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.270\(c432e7r1p5\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:mate_20_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:mate_20_x_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c00e160r2p8\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:mate_20_x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:p30_firmware:9.1.0.272\(c635e4r2p2\):*:*:*:*:*:*:* Versions 9.1.0.272(c635e4r2p2) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Show 21 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:huawei:p30_pro_firmware:*:*:*:*:*:*:*:*before 10.1.0.160\(c00e160r2p8\)VulnerableHuawei
cpe:2.3:h:huawei:p30_pro:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:hima-l29c_firmware:*:*:*:*:*:*:*:*before 10.1.0.273\(c185e5r2p4\)VulnerableHuawei
cpe:2.3:h:huawei:hima-l29c:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:laya-al00ep_firmware:*:*:*:*:*:*:*:*before 10.1.0.160\(c786e160r3p8\)VulnerableHuawei
cpe:2.3:h:huawei:laya-al00ep:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:princeton-al10b_firmware:*:*:*:*:*:*:*:*before 10.1.0.160\(c00e160r2p11\)VulnerableHuawei
cpe:2.3:h:huawei:princeton-al10b:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:tony-al00b_firmware:*:*:*:*:*:*:*:*before 10.1.0.160\(c00e160r2p11\)VulnerableHuawei
cpe:2.3:h:huawei:tony-al00b:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:yale-l61a_firmware:*:*:*:*:*:*:*:*before 10.1.0.225\(c432e3r1p2\)VulnerableHuawei
cpe:2.3:h:huawei:yale-l61a:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:yale-tl00b_firmware:*:*:*:*:*:*:*:*before 10.1.0.160\(c01e160r8p12\)VulnerableHuawei
cpe:2.3:h:huawei:yale-tl00b:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:yalep-al10b_firmware:*:*:*:*:*:*:*:*before 10.1.0.160\(c00e160r8p12\)VulnerableHuawei
cpe:2.3:h:huawei:yalep-al10b:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:*before 10.1.0.231\(c10e3r3p2\)VulnerableHuawei
cpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:*before 10.1.0.270\(c635e3r1p5\); before 10.1.0.273\(c185e7r2p4\); before 10.1.0.273\(c636e7r2p4\); before 10.1.0.277\(c10e7r2p4\); before 10.1.0.277\(c605e7r1p5\)VulnerableHuawei
cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*before 10.1.0.123\(c432e22r2p5\); before 10.1.0.126\(c10e7r5p1\); before 10.1.0.126\(c185e4r7p1\); before 10.1.0.126\(c605e19r1p3\); before 10.1.0.126\(c636e5r3p4\); before 10.1.0.126\(c636e7r3p4\)VulnerableHuawei
cpe:2.3:o:huawei:hima-l29c_firmware:*:*:*:*:*:*:*:*before 10.1.0.273\(c636e5r2p4\); before 10.1.0.275\(c10e4r2p4\)VulnerableHuawei
cpe:2.3:o:huawei:yale-l61a_firmware:*:*:*:*:*:*:*:*before 10.1.0.226\(c10e3r1p1\)VulnerableHuawei
  • cpe:2.3:o:huawei:p30_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c00e160r2p8\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:p30_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:hima-l29c_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.273\(c185e5r2p4\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:hima-l29c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:laya-al00ep_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c786e160r3p8\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:laya-al00ep:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:princeton-al10b_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c00e160r2p11\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:princeton-al10b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:tony-al00b_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c00e160r2p11\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:tony-al00b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:yale-l61a_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.225\(c432e3r1p2\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:yale-l61a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:yale-tl00b_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c01e160r8p12\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:yale-tl00b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:yalep-al10b_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.160\(c00e160r8p12\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:yalep-al10b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:honor_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.231\(c10e3r3p2\) Vulnerable ·Huawei
  • cpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.270\(c635e3r1p5\); before 10.1.0.273\(c185e7r2p4\); before 10.1.0.273\(c636e7r2p4\); before 10.1.0.277\(c10e7r2p4\); before 10.1.0.277\(c605e7r1p5\) Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.123\(c432e22r2p5\); before 10.1.0.126\(c10e7r5p1\); before 10.1.0.126\(c185e4r7p1\); before 10.1.0.126\(c605e19r1p3\); before 10.1.0.126\(c636e5r3p4\); before 10.1.0.126\(c636e7r3p4\) Vulnerable ·Huawei
  • cpe:2.3:o:huawei:hima-l29c_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.273\(c636e5r2p4\); before 10.1.0.275\(c10e4r2p4\) Vulnerable ·Huawei
  • cpe:2.3:o:huawei:yale-l61a_firmware:*:*:*:*:*:*:*:* Versions before 10.1.0.226\(c10e3r1p1\) Vulnerable ·Huawei

Remediation

  • Fix · CNA HONOR 20 PRO (Huawei) Fixed in 10.1.0.230(C432E9R5P1), 10.1.0.231(C10E3R3P2)
  • Fix · CNA HUAWEI Mate 20 (Huawei) Fixed in 10.1.0.160(C00E160R3P8)
  • Fix · CNA HUAWEI Mate 20 Pro (Huawei) Fixed in 10.1.0.270(C432E7R1P5), 10.1.0.270(C635E3R1P5), 10.1.0.273(C185E7R2P4), 10.1.0.273(C636E7R2P4), 10.1.0.277(C10E7R2P4), 10.1.0.277(C605E7R1P5)
  • Fix · CNA HUAWEI Mate 20 X (Huawei) Fixed in 10.1.0.160(C00E160R2P8)
  • Fix · CNA HUAWEI P30 (Huawei) Fixed in 10.1.0.123(C432E22R2P5), 10.1.0.126(C10E7R5P1), 10.1.0.126(C185E4R7P1), 10.1.0.126(C605E19R1P3), 10.1.0.126(C636E5R3P4), 10.1.0.126(C636E7R3P4)
  • Fix · CNA HUAWEI P30 Pro (Huawei) Fixed in 10.1.0.160(C00E160R2P8)
  • Fix · CNA Hima-L29C (Huawei) Fixed in 10.1.0.273(C185E5R2P4), 10.1.0.273(C636E5R2P4), 10.1.0.275(C10E4R2P4)
  • Fix · CNA Laya-AL00EP (Huawei) Fixed in 10.1.0.160(C786E160R3P8)
  • Fix · CNA Princeton-AL10B (Huawei) Fixed in 10.1.0.160(C00E160R2P11)
  • Fix · CNA Tony-AL00B (Huawei) Fixed in 10.1.0.160(C00E160R2P11)
  • Fix · CNA Yale-L61A (Huawei) Fixed in 10.1.0.225(C432E3R1P2), 10.1.0.226(C10E3R1P1)
  • Fix · CNA Yale-TL00B (Huawei) Fixed in 10.1.0.160(C01E160R8P12)
  • Fix · CNA YaleP-AL10B (Huawei) Fixed in 10.1.0.160(C00E160R8P12)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-9247
  2. 2026-10-03 Alias added: GHSA-c423-vwh6-449m

References

Advisory 1

  • TI-2019-06941 Cryptographic flaw in Bluetooth BR/EDR CVSS 3.1HIGH 8.1
  • TI-2019-03711 Double free in Emily-AL00A, Emily-TL00B, Emily-L09C, Emily-L29C CVSS 3.1HIGH 7.8
  • TI-2021-05412 Path traversal in HUAWEI Mate 20;HUAWEI Mate 20… CVSS 3.1MEDIUM 4.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences