CVE-2020-9065 - Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability

Back Back to CVE browser

MEDIUM

Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability

Published Mar 26, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may tamper with the information to affect the availability.

Affected products

Vendor n/a Product Taurus-AL00B Default
n/a
- Version
  Versions earlier than 10.0.0.203(C00E201R7P2)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Taurus-AL00B

n/a

Version	Status	Constraints
Versions earlier than 10.0.0.203(C00E201R7P2)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29894
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-smartphone-en
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29894		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-smartphone-en		x_refsource_MISCVendor Advisory