CVE-2020-9239

MEDIUM

5.5

CVSS Score

Published: September 11, 2020 at 01:25 PM UTC

Updated: June 17, 2026 at 03:27 AM UTC

26 products affected across 1 vendorP20 FirmwareBerkeley L09 FirmwareP20 Pro Firmware

Using BLA-A09;BLA-TL00B;Berkeley-L09;Duke-L09;HUAWEI P20;HUAWEI P20 Pro;Jimmy-AL00A;LON-L29D;NEO-AL00D;Stanford-AL00;Toronto-AL00;Toronto-AL00A;Toronto-TL10 by N/A?

Get instant alerts when new vulnerabilities affect BLA-A09;BLA-TL00B;Berkeley-L09;Duke-L09;HUAWEI P20;HUAWEI P20 Pro;Jimmy-AL00A;LON-L29D;NEO-AL00D;Stanford-AL00;Toronto-AL00;Toronto-AL00A;Toronto-TL10 - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than 8.1.0.326(C01);Berkeley-L09 versions earlier than 8.0.0.163(C10),versions earlier than 8.0.0.163(C432),Versions earlier than 8.0.0.163(C636),Versions earlier than 8.0.0.172(C10);Duke-L09 versions Duke-L09C10B187, versions Duke-L09C432B189, versions Duke-L09C636B189;HUAWEI P20 versions earlier than 8.0.1.16(C00);HUAWEI P20 Pro versions earlier than 8.1.0.152(C00);Jimmy-AL00A versions earlier than Jimmy-AL00AC00B172;LON-L29D versions LON-L29DC721B192;NEO-AL00D versions earlier than 8.1.0.172(C786);Stanford-AL00 versions Stanford-AL00C00B123;Toronto-AL00 versions earlier than Toronto-AL00AC00B225;Toronto-AL00A versions earlier than Toronto-AL00AC00B225;Toronto-TL10 versions earlier than Toronto-TL10C01B225 have an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerab

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Berkeley L09 Firmware · Huawei

95%

v ≤ 8.0.0.163(c432)v < 8.0.0.163(c10)v < 8.0.0.163(c636)v < 8.0.0.172(c10)

Affected range stops below 8.0.0.163(c10), so it looks safe — our inference, not a vendor statement

Affected range stops below 8.0.0.163(c636), so it looks safe — our inference, not a vendor statement

Affected range stops below 8.0.0.172(c10), so it looks safe — our inference, not a vendor statement

huawei-berkeley-l09 (same device)

Bla A09 Firmware · Huawei

95%

v < 8.0.0.123(c567)v < 8.0.0.123(c797)8.0.0.123(c212)

Affected range stops below 8.0.0.123(c567), so it looks safe — our inference, not a vendor statement

Affected range stops below 8.0.0.123(c797), so it looks safe — our inference, not a vendor statement

huawei-bla-a09 (same device)

Bla TL00B Firmware · Huawei

95%

v < 8.1.0.326(c01)

Affected range stops below 8.1.0.326(c01), so it looks safe — our inference, not a vendor statement

huawei-bla-tl00b (same device)

Duke L09 Firmware · Huawei

95%

duke-l09c10b187 duke-l09c432b189 duke-l09c636b189

huawei-duke-l09 (same device)

Jimmy AL00A Firmware · Huawei

95%

v < jimmy-al00ac00b172

Affected range stops below jimmy-al00ac00b172, so it looks safe — our inference, not a vendor statement

huawei-jimmy-al00a (same device)

Lon L29D Firmware · Huawei

95%

lon-l29dc721b192

huawei-lon-l29d (same device)

Neo AL00D Firmware · Huawei

95%

v < 8.1.0.172(c786)

Affected range stops below 8.1.0.172(c786), so it looks safe — our inference, not a vendor statement

huawei-neo-al00d (same device)

P20 Firmware · Huawei

95%

v < 8.0.1.16(c00)

Affected range stops below 8.0.1.16(c00), so it looks safe — our inference, not a vendor statement

huawei-p20 (same device)

P20 Pro Firmware · Huawei

95%

v < 8.1.0.152(c00)

Affected range stops below 8.1.0.152(c00), so it looks safe — our inference, not a vendor statement

huawei-p20-pro (same device)

Stanford AL00 Firmware · Huawei

95%

stanford-al00c00b123

huawei-stanford-al00 (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200909-04-smartphone-en

References (1)

x_refsource_MISCVendor Advisory

Source: [email protected]

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200909-04-smartphone-en

CVSS

5.5MEDIUM[email protected]

Attack Vector: LOCAL
Complexity: LOW
Privileges: LOW
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: NONE
Availability: NONE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card