Race condition

2019-06-0615:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.6%

JSON

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.

CPENameOperatorVersion
honor_10_firmwareeq< columbiaal10b9.0.0.156c0e156r1p20t8
honor_play_firmwareeq< cornellal0a9.0.0.156c0e156r1p13t8
honor_view_10_firmwareeq< berkeleyal209.0.0.156c0e156r2p14t8

Name	Operator	Version
honor_10_firmware	eq	< columbiaal10b9.0.0.156c0e156r1p20t8
honor_play_firmware	eq	< cornellal0a9.0.0.156c0e156r1p13t8
honor_view_10_firmware	eq	< berkeleyal209.0.0.156c0e156r2p14t8

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20190116-01-smartphone-en

0.001 Low

EPSS

Percentile

31.6%

JSON

Related for PRION:CVE-2019-5216