Improper Privilege Management in Huawei Smartphone Products
CVE-2020-9080

7.8HIGH

Key Information:

Vendor

Huawei
Status
Huawei Mate 20 Pro
Huawei Mate 20 Pro (ud)
Huawei Nova 5i
Vendor
CVE Published:
27 December 2024

What is CVE-2020-9080?

A vulnerability has been discovered in Huawei smartphone products that allows a local, authenticated attacker to manipulate specific inputs, leading to improper privilege management. This security flaw can enable an adversary to escalate their privileges locally, posing a significant risk to user data and device integrity. Users of affected Huawei smartphone models should take precautionary measures and apply any security updates provided by the vendor to mitigate potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

HUAWEI Mate 20 Pro 10.1.0.135(C01E135R2P8)

HUAWEI Mate 20 Pro (UD) 10.1.0.135(C00E135R3P8)

HUAWEI nova 5i Versions earlier than 10.0.0.125(C01E123R7P3)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.