CVE-2020-9065

Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may tamper with the information to affect the availability.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@huawei.com

Published

2020-03-26

Last modified

2024-08-04

Weaknesses

CWE-416

Affected products

• Taurus-al00b Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-smartphone-en