CVE Feed

    Dashboard / CVE / CVE-2019-5228

    CVE-2019-5228

    Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), Versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P12), Versions earlier than Princeton-AL10B 9.1.0.233(C00E233R4P3) have a race condition vulnerability. The system does not lock certain function properly, when the function is called by multiple processes could cause out of bound write. An attacker tricks the user into installing a malicious application, successful exploit could cause malicious code execution.

    Published:Nov 12, 2019
    Last Modified:Nov 21, 2024
    EPS:Nov 12, 2019
    EPSS Score:0.00117
    CVSS Score:7.8

    Affected Products

    Vendor
    Huawei
    Product
    Honor V20
    Vendor
    Huawei
    Product
    Honor V20 Firmware
    Vendor
    Huawei
    Product
    P30
    Vendor
    Huawei
    Product
    P30 Firmware
    Vendor
    Huawei
    Product
    P30 Pro
    Vendor
    Huawei
    Product
    P30 Pro Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High