Vulnerabilities > CVE-2019-5214 - Use After Free vulnerability in Huawei Mate 10 Firmware

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

huawei

CWE-416

NVD

Published: 2019-06-06

Updated: 2024-11-21

Summary

There is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.167(C00E85R2P20T8). An attacker tricks the user into installing a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause a denial of service condition.

Vulnerable Configurations

Part	Description	Count
OS	Huawei Huawei Mate 10 Firmware - Huawei Mate 10 Firmware 9.0.0.159\(C432E4R1P9T8\) Huawei Mate 10 Firmware 9.0.0.159\(C636E2R1P12T8\) Huawei Mate 10 Firmware 9.0.0.167\(C00E85R2P20T8\) Huawei Mate 10 Firmware 9.0.0.177\(C185E2R1P12T8\) Huawei Mate 10 Firmware 10.0.0.143\(C00E143R2P4\) Huawei Mate 10 Firmware 10.0.0.189\(C185E6R1P3\) Huawei Mate 10 Firmware Alp-Al00_8.0.0.120\(Sp2C00\) Huawei Mate 10 Firmware Alp-Al00_8.1.0.311	9
Hardware	Huawei Huawei Mate 10 -	1

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References