CVE-2020-9227
MEDIUMHuawei Smart Phones Moana-AL00B <10.1.0.166 - Info Disclosure
Title source: llmDescription
Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this vulnerability may cause device exceptions.
Scores
CVSS v3
5.5
EPSS
0.0008
EPSS Percentile
22.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-909
Status
published
Products (1)
huawei/moana-al00b_firmware
< 10.1.0.166
Published
Jul 17, 2020
Tracked Since
Feb 18, 2026