CVE-2019-5282
Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.202(C185E2R1P12) have a double free vulnerability. An attacker tricks the user into installing a malicious application, which frees on the same memory address twice. Successful exploit could result in malicious code execution.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - psirt@huawei.com
- Published
- 2019-11-13
- Last modified
- 2024-08-04
- Weaknesses
- CWE-415
Affected products
- Emily-al00a Firmware (Huawei)
- Emily-l09c Firmware (Huawei)
- Emily-l29c Firmware (Huawei)
- Emily-tl00b Firmware (Huawei)
- Hima-l09ca Firmware (Huawei)
- Hima-l29c Firmware (Huawei)
- Hima-l29ca Firmware (Huawei)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-smartphone-en
