high7.8
CVE-2020-9080
There is an improper privilege management vulnerability in Huawei smart phone product.
Impact
There is an improper privilege management vulnerability in Huawei smart phone product. A local, authenticated attacker could craft a specific input to exploit this vulnerability. Successful exploitation may lead to local privilege escalation. (Vulnerability ID: HWPSIRT-2020-05272) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9080.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Mate 20 Pro Firmware | Version 10.1.0.135\(c01e135r2p8\) |
| Huawei | Mate 20 Pro \(Ud\) Firmware | Version 10.1.0.135\(c00e135r3p8\) |
| Huawei | Nova 5i Firmware | before 10.0.0.125\(c01e123r7p3\) |