CVE-2020-9237

Huawei smartphone Taurus-AL00B with versions earlier than 10.1.0.126(C00E125R5P3) have a user after free vulnerability. A module is lack of lock protection. Attackers can exploit this vulnerability by launching specific request. This could compromise normal service of the affected device.

• CWE-416

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-02-smartphone-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200812-02-smartphone-enVendor Advisory

Published

Aug 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9228FusionCompute 8.0.0 has an information disclosure vulnerabil…7.5
• CVE-2020-9229FusionCompute 8.0.0 has an information disclosure vulnerabil…4.4
• CVE-2020-9230WS5800-10 version 10.0.3.25 has a denial of service vulnerab…6.5
• CVE-2020-9233FusionCompute 8.0.0 have an insufficient authentication vuln…9.1
• CVE-2020-9235Huawei smartphones HONOR 20 PRO Versions earlier than 10.1.0…5.5
• CVE-2020-9236There is an improper interface design vulnerability in Huawe…8.8
• CVE-2020-9238Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) h…6.5
• CVE-2020-9239Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions…5.5
• CVE-2020-9240Taurus-AN00B versions earlier than 10.1.0.156(C00E155R7P2) h…5.5
• CVE-2020-9241Huawei 5G Mobile WiFi E6878-370 with versions of 10.0.3.1(H5…7
• CVE-2020-9242FusionCompute 8.0.0 have a command injection vulnerability. …8.8
• CVE-2020-9243HUAWEI Mate 30 with versions earlier than 10.1.0.150(C00E136…5.5