CVE-2020-9263

published 2020-10-19

CVE-2020-9263: HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with common privilege, successful exploit could cause code execution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
huawei	mate_30_firmware	< 10.1.0.150\(c00e136r5p3\)	10.1.0.150\(c00e136r5p3\)
huawei	p30_firmware	< 10.1.0.160\(c00e160r2p11\)	10.1.0.160\(c00e160r2p11\)

CWE-416