PT-2020-20482 · Huawei · Taurus-An00B

Published 2020-09-18 · Updated 2020-09-29 · CVE-2020-9084

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2)

Description The issue is related to a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain higher privilege and compromise the service.

Recommendations For versions earlier than 10.1.0.156(C00E155R7P2), update to version 10.1.0.156(C00E155R7P2) or later to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2020-9084

Affected Products

Taurus-An00B

References · 3

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20200916-01-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9084 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9084 · Vendor Advisory