CVE-2020-9262

HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136R5P3) have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with high privilege, successful exploit could cause code execution.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@huawei.com

Published

2020-07-06

Last modified

2024-08-04

Weaknesses

CWE-416

Affected products

• Mate 30 Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200701-06-smartphone-en