Search/CVE-2019-5264
● CVE — Medium

CVE-2019-5264

VendorhuaweiProductmate 9 firmware, mate 10 firmware, mate 10 pro firmware, honor 9 lite firmware, honor 9i firmware, honor v10 firmware, changxiang 7s firmware, changxiang 8 plus firmware, p smart firmware, y9 2018 firmwareDiscoveredDec 13, 2019UpdatedNov 21, 2024

There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure.

CVSS v3.1
4.6 MEDIUM
EPSS
0.23%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorPHYSICAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityNONE
AvailabilityNONE
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
disclosure → media coverage
Dec 13, 2019
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024