Vulnerability · Published Mar 26, 2020 · Assigned by huawei

CVE-2020-9065

Medium 5.5

In plain English

A medium-severity security flaw in Taurus-AL00B. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 91.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may tamper with the information to affect the availability.

Affected products (as reported)

VendorProductVersions
n/a Taurus-AL00B Versions earlier than 10.0.0.203(C00E201R7P2)

References