Vulnerabilities > CVE-2019-5305 - Double Free vulnerability in Huawei Mate 10 Firmware

047910
CVSS 7.1 - HIGH
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
network
huawei
CWE-415
NVD
Published: 2019-06-06
Updated: 2019-06-10

Summary

The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a system crash.

Vulnerable Configurations

Part Description Count
OS
Huawei
16
Hardware
Huawei
1

Common Weakness Enumeration (CWE)

References