CVE-2020-9084 - Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability

Back Back to CVE browser

MEDIUM

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability

Published Sep 18, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 0.22%

Description

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service.

Affected products

Vendor n/a Product Taurus-AN00B Default
n/a
- Version
  Versions earlier than 10.1.0.156(C00E155R7P2)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Taurus-AN00B

n/a

Version	Status	Constraints
Versions earlier than 10.1.0.156(C00E155R7P2)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29913
Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200916-01-smartphone-en
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29913		Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200916-01-smartphone-en		x_refsource_MISCVendor Advisory