CVE-2020-9227: Huawei Moana-AL00B Firmware

Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Huawei Smart Phones Moana-AL00B with versions earlier than 10.1.0.166 have a missing initialization of resource vulnerability. An attacker tricks the user into installing then running a crafted application. Due to improper initialization of specific parameters, successful exploit of this vulnerability may cause device exceptions.

Affected products

• Huawei Moana-AL00B Firmware: before 10.1.0.166 (fixed in 10.1.0.166)

Published 2020-07-17. Last modified 2026-06-17.