CVE-2020-9080

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-12-27 · updated 2026-06-17
Weakness: CWE-269

Description

There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.

Affected products

Huawei Mate 20 Pro (Ud) Firmware: 10.1.0.135(c00e135r3p8)
HUAWEI Mate 20 Pro: 10.1.0.135(c01e135r2p8)
Huawei Nova 5I Firmware: before 10.0.0.125\(c01e123r7p3\) — fixed in 10.0.0.125\(c01e123r7p3\)

How to fix

Upgrade to a fixed version: Huawei Nova 5I Firmware 10.0.0.125\(c01e123r7p3\). Check the vendor advisory for mitigations.

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200819-01-smartphone-en

Get alerted when CVE-2020-9080 or the next vulnerability affects your stack