CVE-2020-9247

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-12-07 · updated 2026-06-17
Weakness: CWE-120

Description

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.

Affected products

Huawei Hima-L29C Firmware: before 10.1.0.273\(c185e5r2p4\); before 10.1.0.273\(c636e5r2p4\); before 10.1.0.275\(c10e4r2p4\) — fixed in 10.1.0.273\(c185e5r2p4\), 10.1.0.273\(c636e5r2p4\), 10.1.0.275\(c10e4r2p4\)
Huawei Honor 20 Pro Firmware: before 10.1.0.230\(c432e9r5p1\); before 10.1.0.231\(c10e3r3p2\) — fixed in 10.1.0.230\(c432e9r5p1\), 10.1.0.231\(c10e3r3p2\)
Huawei Laya-Al00Ep Firmware: before 10.1.0.160\(c786e160r3p8\) — fixed in 10.1.0.160\(c786e160r3p8\)
HUAWEI Mate 20: before 10.1.0.160\(c00e160r3p8\) — fixed in 10.1.0.160\(c00e160r3p8\)
HUAWEI Mate 20 Pro: before 10.1.0.270\(c432e7r1p5\); before 10.1.0.270\(c635e3r1p5\); before 10.1.0.273\(c185e7r2p4\); before 10.1.0.273\(c636e7r2p4\); before 10.1.0.277\(c10e7r2p4\); before 10.1.0.277\(c605e7r1p5\) — fixed in 10.1.0.270\(c432e7r1p5\), 10.1.0.270\(c635e3r1p5\), 10.1.0.273\(c185e7r2p4\), 10.1.0.273\(c636e7r2p4\), 10.1.0.277\(c10e7r2p4\), 10.1.0.277\(c605e7r1p5\)
Huawei Mate 20 X: before 10.1.0.160\(c00e160r2p8\) — fixed in 10.1.0.160\(c00e160r2p8\)
HUAWEI P30: before 10.1.0.123\(c432e22r2p5\); before 10.1.0.126\(c10e7r5p1\); before 10.1.0.126\(c185e4r7p1\); before 10.1.0.126\(c605e19r1p3\); before 10.1.0.126\(c636e5r3p4\); before 10.1.0.126\(c636e7r3p4\) — fixed in 10.1.0.123\(c432e22r2p5\), 10.1.0.126\(c10e7r5p1\), 10.1.0.126\(c185e4r7p1\), 10.1.0.126\(c605e19r1p3\), 10.1.0.126\(c636e5r3p4\), 10.1.0.126\(c636e7r3p4\)
HUAWEI P30 Pro: before 10.1.0.160\(c00e160r2p8\) — fixed in 10.1.0.160\(c00e160r2p8\)
Huawei Princeton-Al10B Firmware: before 10.1.0.160\(c00e160r2p11\) — fixed in 10.1.0.160\(c00e160r2p11\)
Huawei Tony-Al00B Firmware: before 10.1.0.160\(c00e160r2p11\) — fixed in 10.1.0.160\(c00e160r2p11\)
Huawei Yale-L61A Firmware: before 10.1.0.225\(c432e3r1p2\); before 10.1.0.226\(c10e3r1p1\) — fixed in 10.1.0.225\(c432e3r1p2\), 10.1.0.226\(c10e3r1p1\)
Huawei Yale-Tl00B Firmware: before 10.1.0.160\(c01e160r8p12\) — fixed in 10.1.0.160\(c01e160r8p12\)
Huawei Yalep-Al10B Firmware: before 10.1.0.160\(c00e160r8p12\) — fixed in 10.1.0.160\(c00e160r8p12\)

How to fix

Upgrade to a fixed version: Huawei Hima-L29C Firmware 10.1.0.273\(c185e5r2p4\), 10.1.0.273\(c636e5r2p4\), 10.1.0.275\(c10e4r2p4\); Huawei Honor 20 Pro Firmware 10.1.0.230\(c432e9r5p1\), 10.1.0.231\(c10e3r3p2\); Huawei Laya-Al00Ep Firmware 10.1.0.160\(c786e160r3p8\); HUAWEI Mate 20 10.1.0.160\(c00e160r3p8\); HUAWEI Mate 20 Pro 10.1.0.270\(c432e7r1p5\), 10.1.0.270\(c635e3r1p5\), 10.1.0.273\(c185e7r2p4\), 10.1.0.273\(c636e7r2p4\); Huawei Mate 20 X 10.1.0.160\(c00e160r2p8\); HUAWEI P30 10.1.0.123\(c432e22r2p5\), 10.1.0.126\(c10e7r5p1\), 10.1.0.126\(c185e4r7p1\), 10.1.0.126\(c605e19r1p3\); HUAWEI P30 Pro 10.1.0.160\(c00e160r2p8\); Huawei Princeton-Al10B Firmware 10.1.0.160\(c00e160r2p11\); Huawei Tony-Al00B Firmware 10.1.0.160\(c00e160r2p11\); Huawei Yale-L61A Firmware 10.1.0.225\(c432e3r1p2\), 10.1.0.226\(c10e3r1p1\); Huawei Yale-Tl00B Firmware 10.1.0.160\(c01e160r8p12\). Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-9247 or the next vulnerability affects your stack