Vulnerabilities > CVE-2019-5214 - Use After Free vulnerability in Huawei Mate 10 Firmware

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
huawei
CWE-416
NVD
Published: 2019-06-06
Updated: 2019-06-10

Summary

There is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.167(C00E85R2P20T8). An attacker tricks the user into installing a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause a denial of service condition.

Vulnerable Configurations

Part Description Count
OS
Huawei
9
Hardware
Huawei
1

Common Weakness Enumeration (CWE)

References