CVE-2020-9080: Privilege Escalation in Huawei Mate 20 Pro

Successful exploitation of CVE-2020-9080 allows a local, authenticated attacker to elevate their privileges on the Huawei Mate 20 Pro device. This means an attacker who already has some level of access to the phone (e.g., a user account) could gain root or administrator-level access. The attacker could then potentially access sensitive data, install malicious software, or modify system settings without proper authorization. While the vulnerability requires local access and authentication, the potential impact of privilege escalation is significant, allowing for complete control over the device's functionality and data.

1. Reserved2020-02-18
2. Published2024-12-27
3. EPSS updated2026-04-02

The primary mitigation for CVE-2020-9080 is to upgrade the Huawei Mate 20 Pro to version 10.0.1 or later. Huawei has released this update to address the vulnerability. If upgrading is not immediately possible, consider limiting user privileges and implementing stricter access controls to minimize the potential impact of a successful attack. While a direct workaround isn’t available, regular security audits and monitoring for suspicious activity are recommended. After upgrading, confirm the successful update by navigating to Settings > About Phone > Software Version and verifying the version number is 10.0.1 or higher.