PT-2019-17543 · Huawei · Huawei Y9 2018+9

Fan Yuxi · Publicado 2019-12-13 · Atualizado 2020-08-24 · CVE-2019-5264

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei Mate 10 Huawei Mate 10 Pro Huawei Honor V10 Huawei Changxiang 7S Huawei P-smart Huawei Changxiang 8 Plus Huawei Y9 2018 Huawei Honor 9 Lite Huawei Honor 9i Huawei Mate 9

Description The issue is related to an information disclosure problem. It occurs when the software fails to handle certain application information properly, specifically for applications locked by applock under rare conditions. If exploited successfully, this could lead to the disclosure of sensitive information.

Recommendations For each of the affected Huawei smartphone models, apply the necessary security updates as soon as they become available to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2019-5264

Produtos afetados

Huawei Changxiang 7S

Huawei Changxiang 8 Plus

Huawei Honor 9 Lite

Huawei Honor 9I

Huawei Honor V10

Huawei Mate 10

Huawei Mate 10 Pro

Huawei Mate 9

Huawei P Smart

Huawei Y9 2018

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5264 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5264 · Aviso do Fabricante
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en · Aviso do Fabricante