Lucene search

[email protected]CVE-2019-5264

HistoryDec 13, 2019 - 11:15 p.m.

CVE-2019-5264

2019-12-1323:15:12

[email protected]

web.nvd.nist.gov

huawei

smartphones

vulnerability

information disclosure

applock

exploit

nvd

cve-2019-5264

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

JSON

There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure.

Affected configurations

NVD

Node

huaweimate_10_firmwareRange<9.0.0.167\(c00e85r2p20t8\)

AND

huaweimate_10Match-

Node

huaweimate_10_firmwareRange<9.0.0.159\(c432e4r1p9t8\)

AND

huaweimate_10Match-

Node

huaweimate_10_firmwareRange<9.0.0.177\(c185e2r1p12t8\)

AND

huaweimate_10Match-

Node

huaweimate_10_firmwareRange<9.0.0.159\(c636e2r1p12t8\)

AND

huaweimate_10Match-

Node

huaweimate_10_pro_firmwareRange<9.0.0.167\(c00e87r2p15t8\)

AND

huaweimate_10_proMatch-

Node

huaweimate_10_pro_firmwareRange<9.0.0.159\(c185e2r1p13t8\)

AND

huaweimate_10_proMatch-

Node

huaweimate_10_pro_firmwareRange<9.0.0.161\(c432e4r1p11t8\)

AND

huaweimate_10_proMatch-

Node

huaweimate_10_pro_firmwareRange<9.0.0.159\(c636e2r1p13t8\)

AND

huaweimate_10_proMatch-

Node

huaweihonor_v10_firmwareRange<9.0.0.156\(c00e156r2p14t8\)

AND

huaweihonor_v10Match-

Node

huaweihonor_v10_firmwareRange<9.0.0.159\(c432e4r1p9t8\)

AND

huaweihonor_v10Match-

Node

huaweihonor_v10_firmwareRange<9.0.0.159\(c636e3r1p12t8\)

AND

huaweihonor_v10Match-

Node

huaweichangxiang_7s_firmwareRange<9.1.0.107\(c00e107r2p8t8\)

AND

huaweichangxiang_7sMatch-

Node

huaweip-smart_firmwareRange<9.1.0.119\(c636e5r1p1t8\)

AND

huaweip-smartMatch-

Node

huaweip-smart_firmwareRange<9.1.0.130\(c432e8r1p5t8\)

AND

huaweip-smartMatch-

Node

huaweichangxiang_8_plus_firmwareRange<9.1.0.111\(c00e111r1p6t8\)

AND

huaweichangxiang_8_plusMatch-

Node

huaweiy9_2018_firmwareRange<9.1.0.115\(c432e5r1p1t8\)

AND

huaweiy9_2018Match-

Node

huaweiy9_2018_firmwareRange<9.1.0.120\(c636e5r1p1t8\)

AND

huaweiy9_2018Match-

Node

huaweihonor_9_lite_firmwareRange<9.1.0.113\(c00e111r2p10t8\)

AND

huaweihonor_9_liteMatch-

Node

huaweihonor_9_lite_firmwareRange<9.1.0.118\(c636e4r1p1t8\)

AND

huaweihonor_9_liteMatch-

Node

huaweihonor_9_lite_firmwareRange<9.1.0.118\(c185e4r1p4t8\)

AND

huaweihonor_9_liteMatch-

Node

huaweihonor_9_lite_firmwareRange<9.1.0.121\(c432e4r1p3t8\)

AND

huaweihonor_9_liteMatch-

Node

huaweihonor_9i_firmwareRange<9.1.0.121\(c432e4r1p3t8\)

AND

huaweihonor_9iMatch-

Node

huaweihonor_9i_firmwareRange<9.1.0.106\(sp53c636e2r1p4t8\)

AND

huaweihonor_9iMatch-

Node

huaweimate_9_firmwareRange<9.0.1.158\(c432e6r1p8t8\)

AND

huaweimate_9Match-

Node

huaweimate_9_firmwareRange<9.0.1.159\(c636e6r1p8t8\)

AND

huaweimate_9Match-

CPENameOperatorVersion
huawei:mate_10_firmwarehuawei mate 10 firmwarelt9.0.0.167\(c00e85r2p20t8\)

CPE	Name	Operator	Version
huawei:mate_10_firmware	huawei mate 10 firmware	lt	9.0.0.167\(c00e85r2p20t8\)

CNA Affected

[
  {
    "product": "Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.0.167(C00E85R2P20T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.0.159(C432E4R1P9T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.0.177(C185E2R1P12T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.0.159(C636E2R1P12T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.0.167(C00E87R2P15T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.0.159(C185E2R1P13T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.0.161(C432E4R1P11T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.0.159(C636E2R1P13T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.0.156(C00E156R2P14T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.0.159(C636E3R1P12T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.107(C00E107R2P8T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.119(C636E5R1P1T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.130(C432E8R1P5T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.111(C00E111R1P6T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.115(C432E5R1P1T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.120(C636E5R1P1T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.113(C00E111R2P10T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.118(C636E4R1P1T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.118(C185E4R1P4T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.121(C432E4R1P3T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.1.0.112(C00E112R1P6T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier 9.1.0.106(SP53C636E2R1P4T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.1.158(C432E6R1P8T8)"
      },
      {
        "status": "affected",
        "version": "Versions earlier than 9.0.1.159(C636E6R1P8T8)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

JSON

Related for CVE-2019-5264

cvelist1 huawei1 prion1 nvd1