CVE-2019-5264

Published: Dec 13, 2019Modified: Nov 21, 2024

4.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure.

Affected (25)

Products: Huawei: Mate 10 Firmware, Mate 10 Pro Firmware, Honor V10 Firmware, Changxiang 7s Firmware, P Smart Firmware, Changxiang 8 Plus Firmware, Y9 2018 Firmware, Honor 9 Lite Firmware, Honor 9i Firmware, Mate 9 Firmware

10 products

Changxiang 7s Firmware

P Smart Firmware

Changxiang 8 Plus Firmware

Y9 2018 Firmware

Honor 9 Lite Firmware

Honor 9i Firmware

Mate 9 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Mate 10 Firmware	Before 9.0.0.167\(c00e85r2p20t8\)

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Mate 10 Firmware	Before 9.0.0.159\(c432e4r1p9t8\)

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Mate 10 Firmware	Before 9.0.0.177\(c185e2r1p12t8\)

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 10 Firmware	Before 9.0.0.159\(c636e2r1p12t8\)

Running on/with	Platform Versions
Huawei Mate 10	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Mate 10 Pro Firmware	Before 9.0.0.167\(c00e87r2p15t8\)

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Mate 10 Pro Firmware	Before 9.0.0.159\(c185e2r1p13t8\)

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Mate 10 Pro Firmware	Before 9.0.0.161\(c432e4r1p11t8\)

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 10 Pro Firmware	Before 9.0.0.159\(c636e2r1p13t8\)

Running on/with	Platform Versions
Huawei Mate 10 Pro	All versions

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor V10 Firmware	Before 9.0.0.156\(c00e156r2p14t8\)

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor V10 Firmware	Before 9.0.0.159\(c432e4r1p9t8\)

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor V10 Firmware	Before 9.0.0.159\(c636e3r1p12t8\)

Running on/with	Platform Versions
Huawei Honor V10	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Changxiang 7s Firmware	Before 9.1.0.107\(c00e107r2p8t8\)

Running on/with	Platform Versions
Huawei Changxiang 7s	All versions

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P Smart Firmware	Before 9.1.0.119\(c636e5r1p1t8\)

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P Smart Firmware	Before 9.1.0.130\(c432e8r1p5t8\)

Running on/with	Platform Versions
Huawei P Smart	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Changxiang 8 Plus Firmware	Before 9.1.0.111\(c00e111r1p6t8\)

Running on/with	Platform Versions
Huawei Changxiang 8 Plus	All versions

Configuration P

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Y9 2018 Firmware	Before 9.1.0.115\(c432e5r1p1t8\)

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Y9 2018 Firmware	Before 9.1.0.120\(c636e5r1p1t8\)

Running on/with	Platform Versions
Huawei Y9 2018	All versions

Configuration R

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 9 Lite Firmware	Before 9.1.0.113\(c00e111r2p10t8\)

Configuration S

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 9 Lite Firmware	Before 9.1.0.118\(c636e4r1p1t8\)

Configuration T

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 9 Lite Firmware	Before 9.1.0.118\(c185e4r1p4t8\)

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor 9 Lite Firmware	Before 9.1.0.121\(c432e4r1p3t8\)

Running on/with	Platform Versions
Huawei Honor 9 Lite	All versions

Configuration V

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Honor 9i Firmware	Before 9.1.0.121\(c432e4r1p3t8\)

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Honor 9i Firmware	Before 9.1.0.106\(sp53c636e2r1p4t8\)

Running on/with	Platform Versions
Huawei Honor 9i	All versions

Configuration X

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Mate 9 Firmware	Before 9.0.1.158\(c432e6r1p8t8\)

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mate 9 Firmware	Before 9.0.1.159\(c636e6r1p8t8\)

Running on/with	Platform Versions
Huawei Mate 9	All versions

References (2)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en

Source: psirt@huawei.com

Vendor Advisory

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.