Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability.

Published 6 y ago 2020-08-17 · modified 4 mo ago 2026-06-17 · JSON

CVSS

6.7

v3.1 · NVD

CISA KEV

not known exploited

EPSS

0.2%

percentile 12%

Public exploits

none known

Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability. A module is lack of lock protection. Attackers can exploit this vulnerability by launching specific request. This could compromise normal service of the affected device.

Exploit prediction (EPSS)

0.22% probability of exploitation in the next 30 days, higher than 12% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.1	6.7	`CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	4.6	`AV:L/AC:L/Au:N/C:P/I:P/A:P`

Affected products

n/a Taurus-AL00B

Classification

Weakness

CWE-416 Use After Free

References

huawei.com /en/psirt/security-advisories/huawei-sa-20200812-02-smartphone-en · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2020-9237
NVD: CVE-2020-9237

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.