CVEvulnerability

CVE-2019-5216

7.0 HIGH Published 2019-06-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-06-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.0 HIGH — CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-362

Description

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.

Affected configurations

• huawei honor view 10 firmware (< berkeley-al20 9.0.0.156\(c00e156r2p14t8\)) • huawei honor 10 firmware (< columbia-al10b 9.0.0.156\(c00e156r1p20t8\)) • huawei honor play firmware (< cornell-al00a 9.0.0.156\(c00e156r1p13t8\))

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References