CVE-2020-9247: Huawei Hima-l29c Firmware

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

There is a buffer overflow vulnerability in several Huawei products. The system does not sufficiently validate certain configuration parameter which is passed from user that would cause buffer overflow. The attacker should trick the user into installing and running a malicious application with a high privilege, successful exploit may cause code execution. Affected product include Huawei HONOR 20 PRO, Mate 20, Mate 20 Pro, Mate 20 X, P30, P30 Pro, Hima-L29C, Laya-AL00EP, Princeton-AL10B, Tony-AL00B, Yale-L61A, Yale-TL00B and YaleP-AL10B.

Affected products

Huawei Hima-l29c Firmware: before 10.1.0.273\(c185e5r2p4\) (fixed in 10.1.0.273\(c185e5r2p4\)); before 10.1.0.273\(c636e5r2p4\) (fixed in 10.1.0.273\(c636e5r2p4\)); before 10.1.0.275\(c10e4r2p4\) (fixed in 10.1.0.275\(c10e4r2p4\))
Huawei Honor 20 Pro Firmware: before 10.1.0.230\(c432e9r5p1\) (fixed in 10.1.0.230\(c432e9r5p1\)); before 10.1.0.231\(c10e3r3p2\) (fixed in 10.1.0.231\(c10e3r3p2\))
Huawei Laya-AL00EP Firmware: before 10.1.0.160\(c786e160r3p8\) (fixed in 10.1.0.160\(c786e160r3p8\))
Huawei Mate 20 Firmware: before 10.1.0.160\(c00e160r3p8\) (fixed in 10.1.0.160\(c00e160r3p8\))
Huawei Mate 20 Pro Firmware: before 10.1.0.270\(c432e7r1p5\) (fixed in 10.1.0.270\(c432e7r1p5\)); before 10.1.0.270\(c635e3r1p5\) (fixed in 10.1.0.270\(c635e3r1p5\)); before 10.1.0.273\(c185e7r2p4\) (fixed in 10.1.0.273\(c185e7r2p4\)); before 10.1.0.273\(c636e7r2p4\) (fixed in 10.1.0.273\(c636e7r2p4\)); before 10.1.0.277\(c10e7r2p4\) (fixed in 10.1.0.277\(c10e7r2p4\)); before 10.1.0.277\(c605e7r1p5\) (fixed in 10.1.0.277\(c605e7r1p5\))
Huawei Mate 20 X Firmware: before 10.1.0.160\(c00e160r2p8\) (fixed in 10.1.0.160\(c00e160r2p8\))
Huawei p30 Firmware: version 9.1.0.272(c635e4r2p2) only; before 10.1.0.123\(c432e22r2p5\) (fixed in 10.1.0.123\(c432e22r2p5\)); before 10.1.0.126\(c10e7r5p1\) (fixed in 10.1.0.126\(c10e7r5p1\)); before 10.1.0.126\(c185e4r7p1\) (fixed in 10.1.0.126\(c185e4r7p1\)); before 10.1.0.126\(c605e19r1p3\) (fixed in 10.1.0.126\(c605e19r1p3\)); before 10.1.0.126\(c636e5r3p4\) (fixed in 10.1.0.126\(c636e5r3p4\)); …
Huawei p30 Pro Firmware: before 10.1.0.160\(c00e160r2p8\) (fixed in 10.1.0.160\(c00e160r2p8\))
Huawei Princeton-AL10B Firmware: before 10.1.0.160\(c00e160r2p11\) (fixed in 10.1.0.160\(c00e160r2p11\))
Huawei Tony-AL00B Firmware: before 10.1.0.160\(c00e160r2p11\) (fixed in 10.1.0.160\(c00e160r2p11\))
Huawei Yale-l61a Firmware: before 10.1.0.225\(c432e3r1p2\) (fixed in 10.1.0.225\(c432e3r1p2\)); before 10.1.0.226\(c10e3r1p1\) (fixed in 10.1.0.226\(c10e3r1p1\))
Huawei Yale-TL00B Firmware: before 10.1.0.160\(c01e160r8p12\) (fixed in 10.1.0.160\(c01e160r8p12\))
Huawei Yalep-AL10B Firmware: before 10.1.0.160\(c00e160r8p12\) (fixed in 10.1.0.160\(c00e160r8p12\))

Published 2020-12-07. Last modified 2026-06-17.