CVE-2020-1791

Severity: low (CVSS 2.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-18 · updated 2026-06-17

Description

HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.185(C00E74R3P8) have an improper authorization vulnerability. The system has a logic judging error under certain scenario, successful exploit could allow the attacker to switch to third desktop after a series of operation in ADB mode.

Affected products

HUAWEI Mate 20: before 10.0.0.185\(c00e74r3p8\) — fixed in 10.0.0.185\(c00e74r3p8\)

How to fix

Upgrade to a fixed version: HUAWEI Mate 20 10.0.0.185\(c00e74r3p8\). Check the vendor advisory for mitigations.

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-smartphone-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200205-01-smartphone-en

Get alerted when CVE-2020-1791 or the next vulnerability affects your stack