CVE-2020-9065

5.5 mediumEPSS 0.2%

Medium (5.5) in huawei taurus-al00b firmware. EPSS 0.2% chance of exploitation in the next 30 days.

Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may tamper with the information to affect the availability.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 8% of CVEs (scores of 2026-10-31)
CWE: CWE-416
Published: 2020-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:taurus-al00b_firmware

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-smartphone-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200325-01-smartphone-en

Check your stack JSON