CVE-2020-9084

2020-09-1818:06:19

huawei

www.cve.org

taurus-an00b

use-after-free vulnerability

privilege escalation

AI Score

6.4

Confidence

High

EPSS

Percentile

9.8%

JSON

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service.

CNA Affected

[
  {
    "product": "Taurus-AN00B",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than 10.1.0.156(C00E155R7P2)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20200916-01-smartphone-en