CVE-2020-9146

{"id": "CVE-2020-9146", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 1.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2021-04-01T18:15:12.293", "references": [{"url": "https://consumer.huawei.com/cn/support/bulletin/2021/1", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}, {"url": "https://consumer.huawei.com/cn/support/bulletin/2021/1", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-772"}]}], "descriptions": [{"lang": "en", "value": "A memory buffer error vulnerability exists in a component interface of Huawei Smartphone. Local attackers can exploit this vulnerability to cause memory leakage and doS attacks by carefully constructing attack scenarios."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de error de b\u00fafer de la memoria en la interfaz de un componente del Smartphone Huawei. Los atacantes locales pueden explotar esta vulnerabilidad para causar p\u00e9rdidas de la memoria y ataques de denegaci\u00f3n de servicio mediante la construcci\u00f3n cuidadosa de escenarios de ataque."}], "lastModified": "2024-11-21T05:40:08.003", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:10.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "504F2E73-FFD0-4589-8644-FE77656BB28D"}, {"criteria": "cpe:2.3:o:huawei:emui:10.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66AC7F91-917C-40A6-9983-A339EFB091F1"}, {"criteria": "cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7FF0AD1-22C2-423B-822A-E6496CEDAB02"}, {"criteria": "cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B701EC6-8208-4D22-95A6-B07D471A8A8B"}, {"criteria": "cpe:2.3:o:huawei:magic_ui:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A7A4346-1757-48F9-827C-13EABC357302"}, {"criteria": "cpe:2.3:o:huawei:magic_ui:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFAE846A-00EA-417F-B66F-1F5396BB6139"}, {"criteria": "cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B655712B-E86C-4BD2-8A99-AEA382C520E7"}, {"criteria": "cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6066FAB-23F5-4CB2-B89E-B00F8835AC39"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@huawei.com"}