CVE-2020-9093

There is a use after free vulnerability in Taurus-AL00A versions 10.0.0.1(C00E1R1P1). A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privilege. This would compromise normal service.

• CWE-416

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-smartphone-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20201216-01-smartphone-enVendor Advisory

Published

Dec 29, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9086There is a buffer error vulnerability in some Huawei product…4.3
• CVE-2020-9087Taurus-AL00A version 10.0.0.1(C00E1R1P1) has an out-of-bound…5.5
• CVE-2020-9089There is an information vulnerability in Huawei smartphones.…3.3
• CVE-2020-9090FusionAccess version 6.5.1 has an improper authorization vul…7.8
• CVE-2020-9091Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) h…5.5
• CVE-2020-9092HUAWEI Mate 20 versions earlier than 10.1.0.163(C00E160R3P8)…4.6
• CVE-2020-9094There is an out of bound read vulnerability in some verisons…7.5
• CVE-2020-9095HUAWEI P30 Pro smartphone with Versions earlier than 10.1.0.…5.5
• CVE-2020-9096HUAWEI P30 Pro smartphones with Versions earlier than 10.1.0…5.5
• CVE-2020-9098Huawei OceanStor 5310 product with version of V500R007C60SPC…7.5
• CVE-2020-9099Huawei products IPS Module; NGFW Module; NIP6300; NIP6600; N…9.8
• CVE-2020-9100Earlier than HiSuite 10.1.0.500 have a DLL hijacking vulnera…7.8