CVE Vulnerability

CVE-2020-1839

HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution.

3.7 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 1.9 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

6.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.3 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-04-smartphone-en Vendor Advisory
Configurations

Configuration 1
Information

Published : 2020-07-06 07:15

Updated : 2020-07-09 02:41

NVD link : CVE-2020-1839

Mitre link : CVE-2020-1839

Products Affected
No products.
CWE
CWE-362