CVE-2020-9087

Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bounds read vulnerability in XFRM module. An authenticated, local attacker may perform a specific operation to exploit this vulnerability. Due to insufficient validation of the parameters, which may be exploited to cause information leak.

• CWE-125

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-02-smartphone-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200930-02-smartphone-enVendor Advisory

Published

Oct 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9081There is an improper authorization vulnerability in some Hua…6.8
• CVE-2020-9082There is an information disclosure vulnerability in several …4.6
• CVE-2020-9083HUAWEI Mate 20 smart phones with Versions earlier than 10.1.…2.4
• CVE-2020-9084Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) h…6.5
• CVE-2020-9085There is a NULL pointer dereference vulnerability in some Hu…5.3
• CVE-2020-9086There is a buffer error vulnerability in some Huawei product…4.3
• CVE-2020-9089There is an information vulnerability in Huawei smartphones.…3.3
• CVE-2020-9090FusionAccess version 6.5.1 has an improper authorization vul…7.8
• CVE-2020-9091Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) h…5.5
• CVE-2020-9092HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8)…4.6
• CVE-2020-9093There is a use after free vulnerability in Taurus-AL00A vers…5.5
• CVE-2020-9094There is an out of bound read vulnerability in some verisons…7.5