CVE-2020-9237

published 2020-08-17

CVE-2020-9237: Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability. A module is lack of lock protection…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability. A module is lack of lock protection. Attackers can exploit this vulnerability by launching specific request. This could compromise normal service of the affected device.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
huawei	taurus-al00b_firmware	< 10.1.0.126\(c00e125r5p3\)	10.1.0.126\(c00e125r5p3\)
huawei	taurus-al00b_firmware	—	—

CWE-416