CVE-2020-9081: Huawei Mate 20 Firmware

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

There is an improper authorization vulnerability in some Huawei smartphones. An attacker could perform a series of operation in specific mode to exploit this vulnerability. Successful exploit could allow the attacker to bypass app lock. (Vulnerability ID: HWPSIRT-2019-12144) This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2020-9081.

Affected products

Huawei Mate 20 Firmware: before 10.1.0.160\(c00e160r3p8\) (fixed in 10.1.0.160\(c00e160r3p8\)); before 10.1.0.160\(c01e160r2p8\) (fixed in 10.1.0.160\(c01e160r2p8\))
Huawei p30 Firmware: before 10.1.0.160\(c00e160r2p11\) (fixed in 10.1.0.160\(c00e160r2p11\))
Huawei p30 Pro Firmware: before 10.1.0.160\(c00e160r2p8\) (fixed in 10.1.0.160\(c00e160r2p8\)); before 10.1.0.160\(c01e160r2p8\) (fixed in 10.1.0.160\(c01e160r2p8\))
Huawei Princeton-AL10D Firmware: before 10.1.0.160\(c00e160r2p11\) (fixed in 10.1.0.160\(c00e160r2p11\))
Huawei Yale-AL00A Firmware: before 10.1.0.160\(c00e160r8p12\) (fixed in 10.1.0.160\(c00e160r8p12\))
Huawei Yale-AL50A Firmware: before 10.1.0.88\(c00e88r8p1\) (fixed in 10.1.0.88\(c00e88r8p1\))
Huawei Yalep-AL10B Firmware: before 10.1.0.160\(c00e160r8p12\) (fixed in 10.1.0.160\(c00e160r8p12\))

Published 2024-12-27. Last modified 2026-06-17.