CVE-2020-9237

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-08-17 · updated 2026-06-17
Weakness: CWE-416

Description

Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability. A module is lack of lock protection. Attackers can exploit this vulnerability by launching specific request. This could compromise normal service of the affected device.

Affected products

Taurus-AL00B: before 10.1.0.126\(c00e125r5p3\) — fixed in 10.1.0.126\(c00e125r5p3\)

How to fix

Upgrade to a fixed version: Taurus-AL00B 10.1.0.126\(c00e125r5p3\). Check the vendor advisory for mitigations.

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-02-smartphone-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-02-smartphone-en

Get alerted when CVE-2020-9237 or the next vulnerability affects your stack