Vulnerabilities > CVE-2020-9263 - Use After Free vulnerability in Huawei Mate 30 Firmware and P30 Firmware

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
huawei
CWE-416
NVD
Published: 2020-10-19
Updated: 2020-10-22

Summary

HUAWEI Mate 30 versions earlier than 10.1.0.150(C00E136R5P3) and HUAWEI P30 version earlier than 10.1.0.160(C00E160R2P11) have a use after free vulnerability. There is a condition exists that the system would reference memory after it has been freed, the attacker should trick the user into running a crafted application with common privilege, successful exploit could cause code execution.

Vulnerable Configurations

Part Description Count
OS
Huawei
19
Hardware
Huawei
2

Common Weakness Enumeration (CWE)

References