CVE-2019-5216

2019-06-0614:31:50

huawei

www.cve.org

0.001 Low

EPSS

Percentile

31.6%

JSON

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.

CNA Affected

[
  {
    "product": "Honor V10, Honor 10, Honor Play",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20190116-01-smartphone-en

0.001 Low

EPSS

Percentile

31.6%

JSON

Related for CVELIST:CVE-2019-5216