CVE-2020-1839

Katalog CVE

CVSS 6.3 · Medium EPSS 0,18%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada huawei mate 30 firmware. Skor CVSS 3.1 6.3 (Medium) menurut NVD.

Deskripsi (NVD)

HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution.

Rincian

Terbit di NVD

6 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.3 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-04-smartphone-en advisory vendor