CVE-2019-5216

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.68%

Published

Jun 6, 2019

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.

Weaknesses (CWE)

CWE-362

Affected Products (6)

huawei · honor_view_10_firmware (up to berkeley-al20_9.0.0.156\(c00e156r2p14t8\))vulnerable

huawei · honor_view_10

huawei · honor_10_firmware (up to columbia-al10b_9.0.0.156\(c00e156r1p20t8\))vulnerable

huawei · honor_10

huawei · honor_play_firmware (up to cornell-al00a_9.0.0.156\(c00e156r1p13t8\))vulnerable

huawei · honor_play

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190116-01-smartphone-en

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190116-01-smartphone-en

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs