CVE-2020-9125

6.7 mediumEPSS 0.2%

Medium (6.7) in huawei mate 30 firmware. EPSS 0.2% chance of exploitation in the next 30 days.

There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with specific permission can exploit this vulnerability by sending crafted packet with specific parameter to the target device. Due to insufficient validation of the parameter, successful exploit can cause the device to behave abnormally.

Severity

CVSS 3.1

6.7 medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2020-12-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:mate_30_firmware

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-taurus-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-taurus-en

Check your stack JSON