CVE-2020-9235: Huawei Honor 20 Pro Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C185E3R5P1),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.212(C432E10R3P4),Versions earlier than 10.1.0.213(C636E3R4P3),Versions earlier than 10.1.0.214(C10E5R4P3),Versions earlier than 10.1.0.214(C185E3R3P3);Versions earlier than 10.1.0.212(C00E210R5P1);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C01E160R2P11);Versions earlier than 10.1.0.160(C00E160R2P11);Versions earlier than 10.1.0.160(C00E160R8P12);Versions earlier than 10.1.0.230(C432E9R5P1),Versions earlier than 10.1.0.231(C10E3R3P2),Versions earlier than 10.1.0.231(C636E3R3P1);Versions earlier than 10.1.0.225(C431E3R1P2),Versions earlier than 10.1.0.225(C432E3R1P2) contain an information vulnerability. A module has a design error that is lack of control of input. Attackers can exploit this vulnerability to obtain some information. This can lead to information leak.

Affected products

• Huawei Honor 20 Pro Firmware: before 10.1.0.230\(c432e9r5p1\) (fixed in 10.1.0.230\(c432e9r5p1\)); before 10.1.0.231\(c10e3r3p2\) (fixed in 10.1.0.231\(c10e3r3p2\)); before 10.1.0.231\(c185e3r5p1\) (fixed in 10.1.0.231\(c185e3r5p1\)); before 10.1.0.231\(c636e3r3p1\) (fixed in 10.1.0.231\(c636e3r3p1\))
• Huawei Honor View 20 Firmware: before 10.1.0.212\(c432e10r3p4\) (fixed in 10.1.0.212\(c432e10r3p4\)); before 10.1.0.213\(c636e3r4p3\) (fixed in 10.1.0.213\(c636e3r4p3\)); before 10.1.0.214\(c10e5r4p3\) (fixed in 10.1.0.214\(c10e5r4p3\)); before 10.1.0.214\(c185e3r3p3\) (fixed in 10.1.0.214\(c185e3r3p3\))
• Huawei Oxfords-AN00A Firmware: before 10.1.0.212\(c00e210r5p1\) (fixed in 10.1.0.212\(c00e210r5p1\))
• Huawei Princeton-AL10B Firmware: before 10.1.0.160\(c00e160r2p11\) (fixed in 10.1.0.160\(c00e160r2p11\))
• Huawei Princeton-AL10D Firmware: before 10.1.0.160\(c00e160r2p11\) (fixed in 10.1.0.160\(c00e160r2p11\))
• Huawei Princeton-TL10C Firmware: before 10.1.0.160\(c01e160r2p11\) (fixed in 10.1.0.160\(c01e160r2p11\))
• Huawei Tony-AL00B Firmware: before 10.1.0.160\(c00e160r2p11\) (fixed in 10.1.0.160\(c00e160r2p11\))
• Huawei Yale-AL00A Firmware: before 10.1.0.160\(c00e160r8p12\) (fixed in 10.1.0.160\(c00e160r8p12\))
• Huawei Yale-l21a Firmware: before 10.1.0.230\(c432e9r5p1\) (fixed in 10.1.0.230\(c432e9r5p1\)); before 10.1.0.231\(c10e3r3p2\) (fixed in 10.1.0.231\(c10e3r3p2\)); before 10.1.0.231\(c636e3r3p1\) (fixed in 10.1.0.231\(c636e3r3p1\))
• Huawei Yale-l61a Firmware: before 10.1.0.225\(c431e3r1p2\) (fixed in 10.1.0.225\(c431e3r1p2\)); before 10.1.0.225\(c432e3r1p2\) (fixed in 10.1.0.225\(c432e3r1p2\))

Published 2020-09-03. Last modified 2026-06-17.