CVE-2020-1809

Severity: medium (CVSS 4.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-29 · updated 2026-06-17

Description

HUAWEI Mate 10 smartphones with versions earlier than 10.0.0.143(C00E143R2P4) have an information disclosure vulnerability. The attacker could wake up voice assistant then do a series of crafted voice operation, successful exploit could allow the attacker read certain files without unlock the phone leading to information disclosure.

Affected products

Huawei Technologies Co., Ltd. Mate 10: before 10.0.0.143\(c00e143r2p4\) — fixed in 10.0.0.143\(c00e143r2p4\)

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. Mate 10 10.0.0.143\(c00e143r2p4\). Check the vendor advisory for mitigations.

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-smartphone-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-smartphone-en

Get alerted when CVE-2020-1809 or the next vulnerability affects your stack