Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-5228

Certain detection module of P30, P30 Pro, Honor V20 smartphone whith Versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), Versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P12), Versions earlier than Princeton-AL10B 9.1.0.233(C00E233R4P3) have a race condition vulnerability. The system does not lock certain function properly, when the function is called by multiple processes could cause out of bound write. An attacker tricks the user into installing a malicious application, successful exploit could cause malicious code execution.

Published

2019-11-12T23:15:10.223

Last Modified

2024-11-21T04:44:33.877

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-362
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System huawei p30_firmware < elle-al00b_9.1.0.193\(c00e190r1p21\) Yes
Hardware huawei p30 - No
Operating System huawei p30_pro_firmware < vogue-al00a_9.1.0.193\(c00e190r1p12\) Yes
Hardware huawei p30_pro - No
Operating System huawei honor_v20_firmware < princeton-al10b_9.1.0.233\(c00e233r4p3\) Yes
Hardware huawei honor_v20 - No
References