Use-after-free in Huawei Mate 30 - CVE-2020-9262
Published: July 3, 2020 / Updated: July 15, 2020
Vulnerability identifier: #VU29496
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-9262
CWE-ID: CWE-416
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error. A local attacker can trick a victim into running a specially crafted application with high privilege and execute arbitrary code on the target system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
Affected software
Huawei Mate 30
How to mitigate CVE-2020-9262
Install updates from vendor's website.
Huawei Mate 30 - update to 10.1.0.150