Out-of-Bounds Read Vulnerability in Huawei Smartphone

CVE-2020-9087

What is CVE-2020-9087?

The Taurus-AL00A smartphone from Huawei contains an out-of-bounds read vulnerability in its XFRM module. An authenticated local attacker could exploit this flaw by executing a specific operation, potentially leading to unauthorized information disclosure. The risk arises from insufficient validation of input parameters, which enables the attacker to access sensitive information.

References