What’s Vulnerable › Vulnerabilities

CVE-2020-9084

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-09-18 · updated 2026-06-17
• Weakness: CWE-416

Description

Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service.

Affected products

• Taurus-AN00B: before 10.1.0.156\(c00e155r7p2\) — fixed in 10.1.0.156\(c00e155r7p2\)

How to fix

Upgrade to a fixed version: Taurus-AN00B 10.1.0.156\(c00e155r7p2\). Check the vendor advisory for mitigations.

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200916-01-smartphone-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200916-01-smartphone-en

Get alerted when CVE-2020-9084 or the next vulnerability affects your stack