CVE-2020-9093

2020-12-2917:24:42

huawei

www.cve.org

0.001 Low

EPSS

Percentile

22.9%

JSON

There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privilege. This would compromise normal service.

CNA Affected

[
  {
    "product": "Taurus-AL00A",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0.1(C00E1R1P1)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-smartphone-en

0.001 Low

EPSS

Percentile

22.9%

JSON

Related for CVELIST:CVE-2020-9093