Vulnerabilities > CVE-2019-5219 - Double Free vulnerability in Huawei Mate 10 Firmware

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
local
low complexity
huawei
CWE-415
NVD
Published: 2019-06-06
Updated: 2019-06-10

Summary

There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8). An attacker tricks the user into installing a malicious application, which makes multiple processes operate the same resource at the same time. Successful exploit could cause a denial of service condition.

Vulnerable Configurations

Part Description Count
OS
Huawei
10
Hardware
Huawei
1

Common Weakness Enumeration (CWE)

References