description: There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.
problem types: CWE-120 Buffer Overflow
affected:
{
product: HONOR 20 PRO
vendor: Huawei
versions:
lessThan: 10.1.0.230(C432E9R5P1), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.231(C10E3R3P2), status: affected, version: unspecified, versionType: custom
}
{
product: HUAWEI Mate 20
vendor: Huawei
versions:
lessThan: 10.1.0.160(C00E160R3P8), status: affected, version: unspecified, versionType: custom
}
{
product: HUAWEI Mate 20 Pro
vendor: Huawei
versions:
lessThan: 10.1.0.270(C432E7R1P5), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.270(C635E3R1P5), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.273(C185E7R2P4), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.273(C636E7R2P4), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.277(C10E7R2P4), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.277(C605E7R1P5), status: affected, version: unspecified, versionType: custom
}
{
product: HUAWEI Mate 20 X
vendor: Huawei
versions:
lessThan: 10.1.0.160(C00E160R2P8), status: affected, version: unspecified, versionType: custom
}
{
product: HUAWEI P30
vendor: Huawei
versions:
status: affected, version: 9.1.0.272(C635E4R2P2)
lessThan: 10.1.0.123(C432E22R2P5), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.126(C10E7R5P1), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.126(C185E4R7P1), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.126(C605E19R1P3), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.126(C636E5R3P4), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.126(C636E7R3P4), status: affected, version: unspecified, versionType: custom
}
{
product: HUAWEI P30 Pro
vendor: Huawei
versions:
lessThan: 10.1.0.160(C00E160R2P8), status: affected, version: unspecified, versionType: custom
}
{
product: Hima-L29C
vendor: Huawei
versions:
lessThan: 10.1.0.273(C185E5R2P4), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.273(C636E5R2P4), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.275(C10E4R2P4), status: affected, version: unspecified, versionType: custom
}
{
product: Laya-AL00EP
vendor: Huawei
versions:
lessThan: 10.1.0.160(C786E160R3P8), status: affected, version: unspecified, versionType: custom
}
{
product: Princeton-AL10B
vendor: Huawei
versions:
lessThan: 10.1.0.160(C00E160R2P11), status: affected, version: unspecified, versionType: custom
}
{
product: Tony-AL00B
vendor: Huawei
versions:
lessThan: 10.1.0.160(C00E160R2P11), status: affected, version: unspecified, versionType: custom
}
{
product: Yale-L61A
vendor: Huawei
versions:
lessThan: 10.1.0.225(C432E3R1P2), status: affected, version: unspecified, versionType: custom
lessThan: 10.1.0.226(C10E3R1P1), status: affected, version: unspecified, versionType: custom
}
{
product: Yale-TL00B
vendor: Huawei
versions:
lessThan: 10.1.0.160(C01E160R8P12), status: affected, version: unspecified, versionType: custom
}
{
product: YaleP-AL10B
vendor: Huawei
versions:
lessThan: 10.1.0.160(C00E160R8P12), status: affected, version: unspecified, versionType: custom
}
