Vulnerabilities > CVE-2020-9263 - Use After Free vulnerability in Huawei Mate 30 Firmware and P30 Firmware

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
huawei
CWE-416
NVD
Published: 2020-10-19
Updated: 2020-10-22

Summary

HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with common privilege, successful exploit could cause code execution.

Vulnerable Configurations

Part Description Count
OS
Huawei
44
Hardware
Huawei
2

Common Weakness Enumeration (CWE)

References