CVE-2020-9124

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There is a memory leak vulnerability in some versions of Huawei CloudEngine product. An unauthenticated, remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause memory leak.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-401

Affected software

No affected versions have been published.

Timeline

Published
Dec 29, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-91256.7There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 (C00E155R7P2). An attacker with spCVE-2020-91276.7Some Huawei products have a command injection vulnerability. Due to insufficient input validation, an attacker with high privilege may injecCVE-2020-91284.4FusionCompute versions 8.0.0 have an insecure encryption algorithm vulnerability. Attackers with high permissions can exploit this vulnerabiCVE-2020-91296.7HUAWEI Mate 30 versions earlier than 10.1.0.159(C00E159R7P2) have a vulnerability of improper buffer operation. Due to improper restrictionsCVE-2020-91376.7There is a privilege escalation vulnerability in some versions of CloudEngine 12800,CloudEngine 5800,CloudEngine 6800 and CloudEngine 7800. CVE-2020-91385.3There is a heap-based buffer overflow vulnerability in some Huawei Smartphone, Successful exploit of this vulnerability can cause process exCVE-2020-91399.1There is a improper input validation vulnerability in some Huawei Smartphone.Successful exploit of this vulnerability can cause memory accesCVE-2020-91409.8There is a vulnerability with buffer access with incorrect length value in some Huawei Smartphone.Unauthorized users may trigger code executCVE-2020-91419.1There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause inCVE-2020-91429.1There is a heap base buffer overflow vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability can cause heap ovCVE-2020-91435.3There is a missing authentication vulnerability in some Huawei smartphone.Successful exploitation of this vulnerability may lead to low-sensCVE-2020-91449.8There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to im
CVE-2020-9124: High severity, CVSS 7.5 | Vulnix