CVE-2019-5216
There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.
- Score
- CVSS 3.0 7.0 High
- Status
- Modified - psirt@huawei.com
- Published
- 2019-06-06
- Last modified
- 2024-08-04
- Weaknesses
- CWE-362
Affected products
- Honor 10 (Huawei)
- Honor 10 Firmware (Huawei)
- Honor Play (Huawei)
- Honor Play Firmware (Huawei)
- Honor V10 (Huawei)
- Honor View 10 Firmware (Huawei)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190116-01-smartphone-en
