Anusha64/LoanDataSet huggingface dataset:
Explain CVE-2020-1817
Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability. Due to improper permission management of specific files, local attackers with low permissions can inject commands to exploit this vulnerability. Successful exploit may cause privilege escalation.
Affected Products: PCManager
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-pcmanager-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1825
FusionAccess with versions earlier than 6.5.1.SPC002 have a Denial of Service (DoS) vulnerability. Due to insufficient verification on specific input, attackers can exploit this vulnerability by sending constructed messages to the affected device through another device on the same network. Successful exploit could cause affected devices to be abnormal.
Affected Products: FusionAccess
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200610-01-fusionacces-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1826
Huawei Honor Magic2 mobile phones with versions earlier than 10.0.0.175(C00E59R2P11) have an information leak vulnerability. Due to a module using weak encryption tool, an attacker with the root permission may exploit the vulnerability to obtain some information.
Affected Products: Honor Magic2
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200108-01-phone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1827
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage.
Affected Products: NIP6800
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-02-ipsec-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1828
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have an input validation vulnerability where the IPSec module does not validate a field in a specific message. Attackers can send specific message to cause out-of-bound read, compromising normal service.
Affected Products: NIP6800
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-01-ipsec-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1829
Huawei NIP6800 versions V500R001C30 and V500R001C60SPC500; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, and V500R001C60SPC500 have a vulnerability that the IPSec module handles a message improperly. Attackers can send specific message to cause double free memory. This may compromise normal service.
Affected Products: NIP6800
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-03-ipsec-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1830
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00; Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00 have a vulnerability that a memory management error exists when IPSec Module handing a specific message. This causes 1 byte out-of-bound read, compromising normal service.
Affected Products: NIP6800
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200212-04-ipsec-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1831
HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.195(SP31C00E74R3P8) have an improper authorization vulnerability. The digital balance function does not sufficiently restrict the using time of certain user, successful exploit could allow the user break the limit of digital balance function after a series of operations with a PC.
Affected Products: HUAWEI Mate 20
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-04-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1832
E6878-370 products with versions of 10.0.3.1(H557SP27C233) and 10.0.3.1(H563SP1C00) have a stack buffer overflow vulnerability. The program copies an input buffer to an output buffer without verification. An attacker in the adjacent network could send a crafted message, successful exploit could lead to stack buffer overflow which may cause malicious code execution.
Affected Products: E6878-370
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-stack-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1833
Honor 9X smartphones with versions earlier than 9.1.1.172(C00E170R8P1) have an improper authentication vulnerability. A logic error occurs when handling clock function, an attacker should do a series of crafted operations quickly before the phone is unlocked, successful exploit could allow the attacker to access clock information without unlock the phone.
Affected Products: Honor 9X
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-05-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1834
HUAWEI P30 and HUAWEI P30 Pro with versions earlier than 10.1.0.135(C00E135R2P11) and versions earlier than 10.1.0.135(C00E135R2P8) have an insufficient integrity check vulnerability. The system does not check certain software package's integrity sufficiently. Successful exploit could allow an attacker to load a crafted software package to the device.
Affected Products: HUAWEI P30;HUAWEI P30 Pro
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200617-01-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1835
HUAWEI Mate 30 with versions earlier than 10.1.0.126(C00E125R5P3) have an information disclosure vulnerability. A logic judgment error occurs when the system handling Bluetooth connections, an attacker could craft as an authenticated Bluetooth peer to launch the attack. Successful exploit could cause information disclosure.
Affected Products: HUAWEI Mate 30
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200617-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1836
HUAWEI P30 with versions earlier than 10.1.0.160(C00E160R2P11) and HUAWEI P30 Pro with versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability. Certain function's default configuration in the system seems insecure, an attacker should craft a WI-FI hotspot to launch the attack. Successful exploit could cause information disclosure.
Affected Products: HUAWEI P30;HUAWEI P30 Pro
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200624-01-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1837
ChangXiang 8 Plus with versions earlier than 9.1.0.136(C00E121R1P6T8) have a denial of service vulnerability. The device does not properly handle certain message from base station, the attacker could craft a fake base station to launch the attack. Successful exploit could cause a denial of signal service condition.
Affected Products: ChangXiang 8 Plus
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200624-01-dos-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1838
HUAWEI Mate 30 Pro with versions earlier than 10.1.0.150(C00E136R5P3) have is an improper authentication vulnerability. The device does not sufficiently validate certain credential of user's face, an attacker could craft the credential of the user, successful exploit could allow the attacker to pass the authentication with the crafted credential.
Affected Products: HUAWEI Mate 30 Pro
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-03-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1839
HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a race condition vulnerability. There is a timing window exists in which certain pointer members can be modified by another process that is operating concurrently, an attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution.
Affected Products: HUAWEI Mate 30
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-04-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1840
HUAWEI Mate 20 smart phones with versions earlier than 10.0.0.175(C00E70R3P8) have an insufficient authentication vulnerability. A local attacker with high privilege can execute a specific command to exploit this vulnerability. Successful exploitation may cause information leak and compromise the availability of the smart phones.Affected product versions include: HUAWEI Mate 20 versions Versions earlier than 10.0.0.175(C00E70R3P8)
Affected Products: HUAWEI Mate 20
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1841
Huawei CloudLink Board version 20.0.0; DP300 version V500R002C00; RSE6500 versions V100R001C00, V500R002C00, and V500R002C00SPC900; and TE60 versions V500R002C00, V600R006C00, V600R006C00SPC200, V600R006C00SPC300, V600R006C10, V600R019C00, and V600R019C00SPC100 have an information leak vulnerability. An unauthenticated, remote attacker can make a large number of attempts to guess information. Successful exploitation may cause information leak.
Affected Products: CloudLink Board
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200207-01-te-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1842
Huawei HEGE-560 version 1.0.1.20(SP2); OSCA-550 and OSCA-550A version 1.0.0.71(SP1); and OSCA-550AX and OSCA-550X version 1.0.0.71(SP2) have an insufficient authentication vulnerability. An attacker can access the device physically and perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker obtain high privilege.
Affected Products: HEGE-560
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-osca-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1843
Huawei HEGE-560 version 1.0.1.20(SP2), OSCA-550 version 1.0.0.71(SP1), OSCA-550A version 1.0.0.71(SP1), OSCA-550AX version 1.0.0.71(SP2), and OSCA-550X version 1.0.0.71(SP2) have an insufficient verification vulnerability. An attacker can perform specific operations to exploit this vulnerability by physical access methods. Successful exploitation may cause the attacker perform an illegal operation.
Affected Products: HEGE-560
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-02-osca-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1844
PCManager with versions earlier than 10.0.5.51 have a privilege escalation vulnerability in Huawei PCManager products. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.
Affected Products: PCManager
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200221-01-pcmanager-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1845
Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.
Affected Products: PCManager
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200422-01-pcmanager-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1847
There is a denial of service vulnerability in some Huawei products. There is no protection against the attack scenario of specific protocol. A remote, unauthorized attackers can construct attack scenarios, which leads to denial of service.Affected product versions include:NIP6300 versions V500R001C30,V500R001C60;NIP6600 versions V500R001C30,V500R001C60;Secospace USG6300 versions V500R001C30,V500R001C60;Secospace USG6500 versions V500R001C30,V500R001C60;Secospace USG6600 versions V500R001C30,V500R001C60;USG9500 versions V500R001C30,V500R001C60.
Affected Products: NIP6300;NIP6600;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201111-02-dos-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1848
There is a resource management error vulnerability in Jackman-AL00D versions 8.2.0.185(C00R2P1). Local attackers construct malicious application files, causing system applications to run abnormally.
Affected Products: Jackman-AL00D
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-02-smartphone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1853
GaussDB 200 with version of 6.5.1 have a path traversal vulnerability. Due to insufficient input path validation, an authenticated attacker can traverse directories and download files to a specific directory. Successful exploit may cause information leakage.
Affected Products: GaussDB 200
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200120-01-path-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1855
Huawei HEGE-570 version 1.0.1.22(SP3); and HEGE-560, OSCA-550, OSCA-550A, OSCA-550AX, and OSCA-550X version 1.0.1.21(SP3) have an insufficient verification vulnerability. An attacker can access the device physically and exploit this vulnerability to tamper with device information. Successful exploit may cause service abnormal.
Affected Products: HEGE-570
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-03-osca-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1856
Huawei NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, and USG9500 versions V500R001C30, V500R001C60, and V500R005C00 have an information leakage vulnerability. An attacker can exploit this vulnerability by sending specific request packets to affected devices. Successful exploit may lead to information leakage.
Affected Products: NGFW Module, NIP6300, NIP6600, Secospace USG6500, Secospace USG6600, USG9500
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-firewall-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1857
Huawei NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; and Secospace USG6600 and USG9500 versions V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have an information leakage vulnerability. Due to improper processing of some data, a local authenticated attacker can exploit this vulnerability through a series of operations. Successful exploitation may cause information leakage.
Affected Products: NIP6800
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-leakage-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1858
Huawei products NIP6800 versions V500R001C30, V500R001C60SPC500, and V500R005C00SPC100; Secospace USG6600 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100; and USG9500 versions V500R001C30SPC600, V500R001C60SPC500, and V500R005C00SPC100 have a denial of service vulnerability. Attackers need to perform a series of operations in a special scenario to exploit this vulnerability. Successful exploit may cause the new connections can't be established, result in a denial of service.
Affected Products: NIP6800
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-dos-en'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-04-dos-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1860
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an access control bypass vulnerability. Attackers that can access to the internal network can exploit this vulnerability with careful deployment. Successful exploit may cause the access control to be bypassed, and attackers can directly access the Internet.
Affected Products: NIP6800;Secospace USG6600;USG9500
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-firewall-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1861
CloudEngine 12800 with versions of V200R001C00SPC600,V200R001C00SPC700,V200R002C01,V200R002C50SPC800,V200R002C50SPC800PWE,V200R003C00SPC810,V200R003C00SPC810PWE,V200R005C00SPC600,V200R005C00SPC800,V200R005C00SPC800PWE,V200R005C10,V200R005C10SPC300 have an information leakage vulnerability in some Huawei products. In some special cases, an authenticated attacker can exploit this vulnerability because the software processes data improperly. Successful exploitation may lead to information leakage.
Affected Products: CloudEngine 12800
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-leak-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1862
There is a double free vulnerability in some Huawei products. A local attacker with low privilege may perform some operations to exploit the vulnerability. Due to doubly freeing memory, successful exploit may cause some service abnormal. Affected product versions include:CampusInsight versions V100R019C00;ManageOne versions 6.5.RC2.B050.
Affected Products: CampusInsight;ManageOne
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-free-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1863
Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. Due to a logical flaw in a JSON parsing routine, a remote, unauthenticated attacker could exploit this vulnerability to disrupt service in the affected products.
Affected Products: Huawei USG6000V
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-buffer-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1864
Some Huawei products have a security vulnerability due to improper authentication. A remote attacker needs to obtain some information and forge the peer device to send specific packets to the affected device. Due to the improper implementation of the authentication function, attackers can exploit the vulnerability to connect to affected devices and execute a series of commands.Affected product versions include:Secospace AntiDDoS8000 versions V500R001C00,V500R001C20,V500R001C60,V500R005C00.
Affected Products: Secospace AntiDDoS8000
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200318-01-authentication-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1865
There is an out-of-bounds read vulnerability in Huawei CloudEngine products. The software reads data past the end of the intended buffer when parsing certain PIM message, an adjacent attacker could send crafted PIM messages to the device, successful exploit could cause out of bounds read when the system does the certain operation.
Affected Products: CloudEngine 12800;CloudEngine 5800;CloudEngine 6800;CloudEngine 7800
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201230-02-cloudengine-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1866
There is an out-of-bounds read vulnerability in several products. The software reads data past the end of the intended buffer when parsing certain crafted DHCP messages. Successful exploit could cause certain service abnormal. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500,V500R005C00;S12700 versions V200R008C00;S2700 versions V200R008C00;S5700 versions V200R008C00;S6700 versions V200R008C00;S7700 versions V200R008C00;S9700 versions V200R008C00;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500,V500R005C00;USG9500 versions V500R001C30SPC300,V500R001C30SPC600,V500R001C60SPC500,V500R005C00.
Affected Products: NIP6800;S12700;S2700;S5700;S6700;S7700;S9700;Secospace USG6600;USG9500
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-09-eudemon-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1870
There is a denial of service vulnerability in some Huawei products. Due to improper memory management, memory leakage may occur in some special cases. Attackers can perform a series of operations to exploit this vulnerability. Successful exploit may cause a denial of service. Affected product versions include: CloudEngine 12800 versions V200R019C00SPC800; CloudEngine 5800 versions V200R019C00SPC800; CloudEngine 6800 versions V200R005C20SPC800, V200R019C00SPC800; CloudEngine 7800 versions V200R019C00SPC800; NE40E versions V800R011C00SPC200, V800R011C00SPC300, V800R011C10SPC100; NE40E-F versions V800R011C00SPC200, V800R011C10SPC100; NE40E-M versions V800R011C00SPC200, V800R011C10SPC100.
Affected Products: CloudEngine 12800
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200527-01-dos-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1871
USG9500 with software of V500R001C30SPC100; V500R001C30SPC200; V500R001C30SPC600; V500R001C60SPC500; V500R005C00SPC100; V500R005C00SPC200 have an improper credentials management vulnerability. The software does not properly manage certain credentials. Successful exploit could cause information disclosure or damage, and impact the confidentiality or integrity.
Affected Products: USG9500
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200102-01-credential-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1872
Huawei smart phones P10 Plus with versions earlier than 9.1.0.201(C01E75R1P12T8), earlier than 9.1.0.252(C185E2R1P9T8), earlier than 9.1.0.252(C432E4R1P9T8), and earlier than 9.1.0.255(C576E6R1P8T8) have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance mode, an attacker can perform some operations to bypass the startup wizard, and then open some switch. As a result, the digital balance function is bypassed.
Affected Products: HUAWEI P10 Plus
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-digitalbalance-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1873
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds read vulnerability. An unauthenticated attacker crafts malformed message with specific parameter and sends the message to the affected products. Due to insufficient validation of message, which may be exploited to cause the device reboot.
Affected Products: NIP6800;Secospace USG6600;USG9500
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofboundread-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1874
NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have a invalid pointer access vulnerability. The software system access an invalid pointer when operator logs in to the device and performs some operations. Successful exploit could cause certain process reboot.
Affected Products: NIP6800;Secospace USG6600;USG9500
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-invalidpointer-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1875
NIP6800;Secospace USG6600;USG9500 products versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when an abnormal condition occurs in certain operation. Successful exploit could cause certain process reboot. Affected product versions include:NIP6800 versions V500R001C30,V500R001C60SPC500;Secospace USG6600 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500;USG9500 versions V500R001C30SPC200,V500R001C30SPC600,V500R001C60SPC500.
Affected Products: NIP6800;Secospace USG6600;USG9500
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-wildpointer-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1876
NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an out-of-bounds write vulnerability. An unauthenticated attacker crafts malformed packets with specific parameter and sends the packets to the affected products. Due to insufficient validation of packets, which may be exploited to cause the process reboot.
Affected Products: NIP6800;Secospace USG6600;USG9500
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-01-outofwrite-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1877
NIP6800;Secospace USG6600;USG9500 with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have an invalid pointer access vulnerability. The software system access an invalid pointer when administrator log in to the device and performs some operations. Successful exploit could cause certain process reboot.
Affected Products: NIP6800;Secospace USG6600;USG9500
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-05-invalidpointer-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1878
Huawei smartphone OxfordS-AN00A with versions earlier than 10.0.1.152D(C735E152R3P3),versions earlier than 10.0.1.160(C00E160R4P1) have an improper authentication vulnerability. Authentication to target component is improper when device performs an operation. Attackers exploit this vulnerability to obtain some information by loading malicious application, leading to information leak.
Affected Products: OxfordS-AN00A
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-informationleak-en'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1879
There is an improper integrity checking vulnerability on some huawei products. The software of the affected product has an improper integrity check which may allow an attacker with high privilege to make malicious modifications.Affected product versions include:HEGE-560 versions 1.0.1.21(SP3);HEGE-570 versions 1.0.1.22(SP3);OSCA-550 versions 1.0.1.21(SP3);OSCA-550A versions 1.0.1.21(SP3);OSCA-550AX versions 1.0.1.21(SP3);OSCA-550X versions 1.0.1.21(SP3).
Affected Products: HEGE-560;HEGE-570;OSCA-550;OSCA-550A;OSCA-550AX;OSCA-550X
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200311-01-integrity-en'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1880
Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205(C00E202R7P2) have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal.
Affected Products: Lion-AL00C
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200415-02-dos-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1881
NIP6800;Secospace USG6600;USG9500 products with versions of V500R001C30; V500R001C60SPC500; V500R005C00SPC100 have have a resource management error vulnerability. An attacker needs to perform specific operations to trigger a function of the affected device. Due to improper resource management of the function, the vulnerability can be exploited to cause service abnormal on affected devices.
Affected Products: NIP6800;Secospace USG6600;USG9500
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200219-02-resource-en'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200429-01-invalidpointer-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1882
Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than 10.0.0.180(C432E6R1P7), earlier than 10.0.0.180(C636E5R2P3); HUAWEI Mate 20 RS versions earlier than 10.0.0.175(C786E70R3P8); HUAWEI Mate 20 X versions earlier than 10.0.0.176(C00E70R2P8); and Honor Magic2 versions earlier than 10.0.0.175(C00E59R2P11) have an improper authorization vulnerability. Due to improper authorization of some function, attackers can bypass the authorization to perform some operations.
Affected Products: Ever-L29B
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200122-01-phone-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1883
Huawei products NIP6800;Secospace USG6600;USG9500 have a memory leak vulnerability. An attacker with high privileges exploits this vulnerability by continuously performing specific operations. Successful exploitation of this vulnerability can cause service abnormal.
Affected Products: NIP6800
References: [{'tags': ['x_refsource_MISC'], 'url': 'https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200603-01-memory-en'}]
CVE State: PUBLISHED
Explain CVE-2020-1885
Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file.
Affected Products: Oculus Desktop
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.facebook.com/security/advisories/cve-2020-1885'}]
CVE State: PUBLISHED
Explain CVE-2020-1886
A buffer overflow in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have allowed an out-of-bounds write via a specially crafted video stream after receiving and answering a malicious video call.
Affected Products: WhatsApp for Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020'}]
CVE State: PUBLISHED
Explain CVE-2020-1887
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root chain of trust.
Affected Products: Osquery
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/osquery/osquery/pull/6197'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.facebook.com/security/advisories/cve-2020-1887'}]
CVE State: PUBLISHED
Explain CVE-2020-1888
Insufficient boundary checks when decoding JSON in handleBackslash reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.
Affected Products: HHVM
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/facebook/hhvm/commit/b3679121bb3c7017ff04b4c08402ffff5cf59b13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://hhvm.com/blog/2020/02/20/security-update.html'}]
CVE State: PUBLISHED
Explain CVE-2020-1889
A security feature bypass issue in WhatsApp Desktop versions prior to v0.3.4932 could have allowed for sandbox escape in Electron and escalation of privilege if combined with a remote code execution vulnerability inside the sandboxed renderer process.
Affected Products: WhatsApp Desktop
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020/'}]
CVE State: PUBLISHED
Explain CVE-2020-1890
A URL validation issue in WhatsApp for Android prior to v2.20.11 and WhatsApp Business for Android prior to v2.20.2 could have caused the recipient of a sticker message containing deliberately malformed data to load an image from a sender-controlled URL without user interaction.
Affected Products: WhatsApp for Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020'}]
CVE State: PUBLISHED
Explain CVE-2020-1891
A user controlled parameter used in video call in WhatsApp for Android prior to v2.20.17, WhatsApp Business for Android prior to v2.20.7, WhatsApp for iPhone prior to v2.20.20, and WhatsApp Business for iPhone prior to v2.20.20 could have allowed an out-of-bounds write on 32-bit devices.
Affected Products: WhatsApp Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020'}]
CVE State: PUBLISHED
Explain CVE-2020-1892
Insufficient boundary checks when decoding JSON in JSON_parser allows read access to out of bounds memory, potentially leading to information leak and DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.
Affected Products: HHVM
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://hhvm.com/blog/2020/02/20/security-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/facebook/hhvm/commit/dabd48caf74995e605f1700344f1ff4a5d83441d'}]
CVE State: PUBLISHED
Explain CVE-2020-1893
Insufficient boundary checks when decoding JSON in TryParse reads out of bounds memory, potentially leading to DOS. This issue affects HHVM 4.45.0, 4.44.0, 4.43.0, 4.42.0, 4.41.0, 4.40.0, 4.39.0, versions between 4.33.0 and 4.38.0 (inclusive), versions between 4.9.0 and 4.32.0 (inclusive), and versions prior to 4.8.7.
Affected Products: HHVM
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://hhvm.com/blog/2020/02/20/security-update.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/facebook/hhvm/commit/bd586671a3c22eb2f07e55f11b3ce64e1f7961e7'}]
CVE State: PUBLISHED
Explain CVE-2020-1894
A stack write overflow in WhatsApp for Android prior to v2.20.35, WhatsApp Business for Android prior to v2.20.20, WhatsApp for iPhone prior to v2.20.30, and WhatsApp Business for iPhone prior to v2.20.30 could have allowed arbitrary code execution when playing a specially crafted push to talk message.
Affected Products: WhatsApp Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020'}]
CVE State: PUBLISHED
Explain CVE-2020-1895
A large heap overflow could occur in Instagram for Android when attempting to upload an image with specially crafted dimensions. This affects versions prior to 128.0.0.26.128.
Affected Products: Instagram for Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.facebook.com/security/advisories/cve-2020-1895'}]
CVE State: PUBLISHED
Explain CVE-2020-1896
A stack overflow vulnerability in Facebook Hermes 'builtin apply' prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7d2 (https://github.com/facebook/hermes/commit/86543ac47e59c522976b5632b8bf9a2a4583c7d2) allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
Affected Products: Hermes
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.facebook.com/security/advisories/cve-2020-1896'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/facebook/hermes/commit/86543ac47e59c522976b5632b8bf9a2a4583c7d2'}]
CVE State: PUBLISHED
Explain CVE-2020-1897
A use-after-free is possible due to an error in lifetime management in the request adaptor when a malicious client invokes request error handling in a specific sequence. This issue affects versions of proxygen prior to v2020.05.18.00.
Affected Products: proxygen
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.facebook.com/security/advisories/cve-2020-1897'}]
CVE State: PUBLISHED
Explain CVE-2020-1898
The fb_unserialize function did not impose a depth limit for nested deserialization. That meant a maliciously constructed string could cause deserialization to recurse, leading to stack exhaustion. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.
Affected Products: HHVM
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://hhvm.com/blog/2020/06/30/security-update.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/facebook/hhvm/commit/1746dfb11fc0048366f34669e74318b8278a684c'}]
CVE State: PUBLISHED
Explain CVE-2020-1899
The unserialize() function supported a type code, "S", which was meant to be supported only for APC serialization. This type code allowed arbitrary memory addresses to be accessed as if they were static StringData objects. This issue affected HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.
Affected Products: HHVM
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://hhvm.com/blog/2020/06/30/security-update.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/facebook/hhvm/commit/1107228a5128d3ca1c4add8ac1635d933cbbe2e9'}]
CVE State: PUBLISHED
Explain CVE-2020-1900
When unserializing an object with dynamic properties HHVM needs to pre-reserve the full size of the dynamic property array before inserting anything into it. Otherwise the array might resize, invalidating previously stored references. This pre-reservation was not occurring in HHVM prior to v4.32.3, between versions 4.33.0 and 4.56.0, 4.57.0, 4.58.0, 4.58.1, 4.59.0, 4.60.0, 4.61.0, 4.62.0.
Affected Products: HHVM
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://hhvm.com/blog/2020/06/30/security-update.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/facebook/hhvm/commit/c1c4bb0cf9e076aafaf4ff3515556ef9faf906f3'}]
CVE State: PUBLISHED
Explain CVE-2020-1901
Receiving a large text message containing URLs in WhatsApp for iOS prior to v2.20.91.4 could have caused the application to freeze while processing the message.
Affected Products: WhatsApp for iOS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020/'}]
CVE State: PUBLISHED
Explain CVE-2020-1902
A user running a quick search on a highly forwarded message on WhatsApp for Android from v2.20.108 to v2.20.140 or WhatsApp Business for Android from v2.20.35 to v2.20.49 could have been sent to the Google service over plain HTTP.
Affected Products: WhatsApp for Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020/'}]
CVE State: PUBLISHED
Explain CVE-2020-1903
An issue when unzipping docx, pptx, and xlsx documents in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have resulted in an out-of-memory denial of service. This issue would have required the receiver to explicitly open the attachment if it was received from a number not in the receiver's WhatsApp contacts.
Affected Products: WhatsApp for iOS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020/'}]
CVE State: PUBLISHED
Explain CVE-2020-1904
A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages.
Affected Products: WhatsApp for iOS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020/'}]
CVE State: PUBLISHED
Explain CVE-2020-1905
Media ContentProvider URIs used for opening attachments in other apps were generated sequentially prior to WhatsApp for Android v2.20.185, which could have allowed a malicious third party app chosen to open the file to guess the URIs for previously opened attachments until the opener app is terminated.
Affected Products: WhatsApp for Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020/'}]
CVE State: PUBLISHED
Explain CVE-2020-1906
A buffer overflow in WhatsApp for Android prior to v2.20.130 and WhatsApp Business for Android prior to v2.20.46 could have allowed an out-of-bounds write when processing malformed local videos with E-AC-3 audio streams.
Affected Products: WhatsApp for Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020/'}]
CVE State: PUBLISHED
Explain CVE-2020-1907
A stack overflow in WhatsApp for Android prior to v2.20.196.16, WhatsApp Business for Android prior to v2.20.196.12, WhatsApp for iOS prior to v2.20.90, WhatsApp Business for iOS prior to v2.20.90, and WhatsApp for Portal prior to v173.0.0.29.505 could have allowed arbitrary code execution when parsing the contents of an RTP Extension header.
Affected Products: WhatsApp for Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020/'}]
CVE State: PUBLISHED
Explain CVE-2020-1908
Improper authorization of the Screen Lock feature in WhatsApp and WhatsApp Business for iOS prior to v2.20.100 could have permitted use of Siri to interact with the WhatsApp application even after the phone was locked.
Affected Products: WhatsApp Business for iOS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020/'}]
CVE State: PUBLISHED
Explain CVE-2020-1909
A use-after-free in a logging library in WhatsApp for iOS prior to v2.20.111 and WhatsApp Business for iOS prior to v2.20.111 could have resulted in memory corruption, crashes and potentially code execution. This could have happened only if several events occurred together in sequence, including receiving an animated sticker while placing a WhatsApp video call on hold.
Affected Products: WhatsApp Business for iOS
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2020/'}]
CVE State: PUBLISHED
Explain CVE-2020-1910
A missing bounds check in WhatsApp for Android prior to v2.21.1.13 and WhatsApp Business for Android prior to v2.21.1.13 could have allowed out-of-bounds read and write if a user applied specific image filters to a specially crafted image and sent the resulting image.
Affected Products: WhatsApp Business for Android
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.whatsapp.com/security/advisories/2021/'}]
CVE State: PUBLISHED
Explain CVE-2020-1911
A type confusion vulnerability when resolving properties of JavaScript objects with specially-crafted prototype chains in Facebook Hermes prior to commit fe52854cdf6725c2eaa9e125995da76e6ceb27da allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
Affected Products: Hermes
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.facebook.com/security/advisories/cve-2020-1911'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/facebook/hermes/commit/fe52854cdf6725c2eaa9e125995da76e6ceb27da'}]
CVE State: PUBLISHED
Explain CVE-2020-1912
An out-of-bounds read/write vulnerability when executing lazily compiled inner generator functions in Facebook Hermes prior to commit 091835377369c8fd5917d9b87acffa721ad2a168 allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
Affected Products: Hermes
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.facebook.com/security/advisories/cve-2020-1912'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/facebook/hermes/commit/091835377369c8fd5917d9b87acffa721ad2a168'}]
CVE State: PUBLISHED
Explain CVE-2020-1913
An Integer signedness error in the JavaScript Interpreter in Facebook Hermes prior to commit 2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6 allows attackers to cause a denial of service attack or a potential RCE via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
Affected Products: Hermes
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.facebook.com/security/advisories/cve-2020-1913'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/facebook/hermes/commit/2c7af7ec481ceffd0d14ce2d7c045e475fd71dc6'}]
CVE State: PUBLISHED
Explain CVE-2020-1914
A logic vulnerability when handling the SaveGeneratorLong instruction in Facebook Hermes prior to commit b2021df620824627f5a8c96615edbd1eb7fdddfc allows attackers to potentially read out of bounds or theoretically execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
Affected Products: Hermes
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.facebook.com/security/advisories/cve-2020-1914'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/facebook/hermes/commit/b2021df620824627f5a8c96615edbd1eb7fdddfc'}]
CVE State: PUBLISHED
Explain CVE-2020-1915
An out-of-bounds read in the JavaScript Interpreter in Facebook Hermes prior to commit 8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0 allows attackers to cause a denial of service attack or possible further memory corruption via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.
Affected Products: Hermes
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.facebook.com/security/advisories/cve-2020-1915'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/facebook/hermes/commit/8cb935cd3b2321c46aa6b7ed8454d95c75a7fca0'}]
CVE State: PUBLISHED
Explain CVE-2020-1916
An incorrect size calculation in ldap_escape may lead to an integer overflow when overly long input is passed in, resulting in an out-of-bounds write. This issue affects HHVM prior to 4.56.2, all versions between 4.57.0 and 4.78.0, 4.79.0, 4.80.0, 4.81.0, 4.82.0, 4.83.0.
Affected Products: HHVM
References: [{'tags': ['x_refsource_CONFIRM'], 'url': 'https://hhvm.com/blog/2020/11/12/security-update.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/facebook/hhvm/commit/abe0b29e4d3a610f9bc920b8be4ad8403364c2d4'}]
CVE State: PUBLISHED