PT-2019-17543 · Huawei · Huawei Y9 2018+9

Fan Yuxi · Published 2019-12-13 · Updated 2020-08-24 · CVE-2019-5264

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei Mate 10 Huawei Mate 10 Pro Huawei Honor V10 Huawei Changxiang 7S Huawei P-smart Huawei Changxiang 8 Plus Huawei Y9 2018 Huawei Honor 9 Lite Huawei Honor 9i Huawei Mate 9

Description The issue is related to an information disclosure problem. It occurs when the software fails to handle certain application information properly, specifically for applications locked by applock under rare conditions. If exploited successfully, this could lead to the disclosure of sensitive information.

Recommendations For each of the affected Huawei smartphone models, apply the necessary security updates as soon as they become available to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-5264

Affected Products

Huawei Changxiang 7S

Huawei Changxiang 8 Plus

Huawei Honor 9 Lite

Huawei Honor 9I

Huawei Honor V10

Huawei Mate 10

Huawei Mate 10 Pro

Huawei Mate 9

Huawei P Smart

Huawei Y9 2018

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5264 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5264 · Vendor Advisory
• https://huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en · Vendor Advisory