PT-2020-20468 · Huawei · Taurus-An00B

Published 2020-03-26 · Updated 2020-03-30 · CVE-2020-9065

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei smart phone Taurus-AL00B versions earlier than 10.0.0.203(C00E201R7P2)

Description The issue is a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may tamper with the information to affect the availability.

Recommendations For versions earlier than 10.0.0.203(C00E201R7P2), update to version 10.0.0.203(C00E201R7P2) or later to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2020-9065

Affected Products

Taurus-An00B

References · 4

• https://osv.dev/vulnerability/CVE-2020-9065 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9065 · Security Note
• https://t.me/cvenotify/2197 · Telegram Post