CVE-2020-9082

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the attacker should gain the permit to execute commands in ADB mode and then do a series of operation on the phone. Successful exploit could allow the attacker to gain certain information from certain apps locked by Applock. (Vulnerability ID: HWPSIRT-2019-07112)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9082.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Dec 27, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2020

CVE-2020-90832.4HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163(C00E160R3P8) have a denial of service (DoS) vulnerability. The attacker ca CVE-2020-90846.5Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may p CVE-2020-90855.3There is a NULL pointer dereference vulnerability in some Huawei products. An attacker may send specially crafted POST messages to the affec CVE-2020-90864.3There is a buffer error vulnerability in some Huawei product. An unauthenticated attacker may send special UPNP message to the affected prod CVE-2020-90875.5Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perfor CVE-2020-90893.3There is an information vulnerability in Huawei smartphones. A function in a module can be called without verifying the caller's access. Att CVE-2020-90907.8FusionAccess version 6.5.1 has an improper authorization vulnerability. A command is authorized with incorrect privilege. Attackers with oth CVE-2020-90915.5Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) have an out-of-bounds read and write vulnerability. Some functions do not verify CVE-2020-90924.6HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8) have a JavaScript injection vulnerability. A module does not verify a specific CVE-2020-90935.5There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly,CVE-2020-90947.5There is an out of bound read vulnerability in some verisons of Huawei CloudEngine product. A module does not deal with specific message pro CVE-2020-90955.5HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.160(C00E160R2P8) has an integer overflow vulnerability. Some functions are lack