CVE Feed

    Dashboard / CVE / CVE-2019-5282

    CVE-2019-5282

    Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.202(C185E2R1P12) have a double free vulnerability. An attacker tricks the user into installing a malicious application, which frees on the same memory address twice. Successful exploit could result in malicious code execution.

    Published:Nov 13, 2019
    Last Modified:Nov 21, 2024
    EPS:Nov 13, 2019
    EPSS Score:0.00151
    CVSS Score:7.8

    Affected Products

    Vendor
    Huawei
    Product
    Emily-al00a
    Vendor
    Huawei
    Product
    Emily-al00a Firmware
    Vendor
    Huawei
    Product
    Emily-l09c
    Vendor
    Huawei
    Product
    Emily-l09c Firmware
    Vendor
    Huawei
    Product
    Emily-l29c
    Vendor
    Huawei
    Product
    Emily-l29c Firmware
    Vendor
    Huawei
    Product
    Emily-tl00b
    Vendor
    Huawei
    Product
    Emily-tl00b Firmware
    Vendor
    Huawei
    Product
    Hima-l09ca
    Vendor
    Huawei
    Product
    Hima-l09ca Firmware
    Vendor
    Huawei
    Product
    Hima-l29c
    Vendor
    Huawei
    Product
    Hima-l29c Firmware
    Vendor
    Huawei
    Product
    Hima-l29ca
    Vendor
    Huawei
    Product
    Hima-l29ca Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-415 Double Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2019-5235 (CVSS 5.3) — Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets an…
    CVE-2018-7961 (CVSS 6.5) — There is a smart SMS verification code vulnerability in some Huawei smart phones. An attacker should trick a u…
    CVE-2018-7925 (CVSS 6.8) — The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen …
    CVE-2018-7911 (CVSS 4.6) — Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.…
    CVE-2018-7947 (CVSS 3.9) — Huawei mobile phones with versions earlier before Emily-AL00A 8.1.0.153(C00) have an authentication bypass vul…
    CVE-2018-7944 (CVSS 6.8) — Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Pro…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High