CVE-2020-9074

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-05 · updated 2026-06-17
Weakness: CWE-755

Description

Huawei Smartphones HONOR 20 PRO;Honor View 20;HONOR 20 have an improper handling of exceptional condition Vulnerability. A component cannot deal with an exception correctly. Attackers can exploit this vulnerability by sending malformed message. This could compromise normal service of affected phones.

Affected products

Huawei Honor 20 Firmware: before 10.0.0.186\(c185e2r2p1\); before 10.0.0.194\(c432e9r5p1\) — fixed in 10.0.0.186\(c185e2r2p1\), 10.0.0.194\(c432e9r5p1\)
Huawei Honor 20 Pro Firmware: before 10.0.0.194\(c432e9r5p1\); before 10.0.0.194\(c636e3r3p1\); before 10.0.0.194\(c00e62r8p12\); before 10.0.0.194\(c10e3r3p2\) — fixed in 10.0.0.194\(c00e62r8p12\), 10.0.0.194\(c10e3r3p2\), 10.0.0.194\(c432e9r5p1\), 10.0.0.194\(c636e3r3p1\)
Huawei Honor View 20 Firmware: before 10.0.0.200\(c185e3r3p3\); before 10.0.0.201\(c636e3r4p3\); before 10.0.0.195\(c00e62r4p11\); before 10.0.0.201\(c10e5r4p3\) — fixed in 10.0.0.195\(c00e62r4p11\), 10.0.0.200\(c185e3r3p3\), 10.0.0.201\(c10e5r4p3\), 10.0.0.201\(c636e3r4p3\)

How to fix

Upgrade to a fixed version: Huawei Honor 20 Firmware 10.0.0.186\(c185e2r2p1\), 10.0.0.194\(c432e9r5p1\); Huawei Honor 20 Pro Firmware 10.0.0.194\(c00e62r8p12\), 10.0.0.194\(c10e3r3p2\), 10.0.0.194\(c432e9r5p1\), 10.0.0.194\(c636e3r3p1\); Huawei Honor View 20 Firmware 10.0.0.195\(c00e62r4p11\), 10.0.0.200\(c185e3r3p3\), 10.0.0.201\(c10e5r4p3\), 10.0.0.201\(c636e3r4p3\). Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-9074 or the next vulnerability affects your stack