CVE-2019-5264
First published: Fri Dec 13 2019(Updated: )
There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Mate 10 Firmware | <9.0.0.167\(c00e85r2p20t8\) | |
| Huawei Mate 10 | ||
| Huawei Mate 10 Firmware | <9.0.0.159\(c432e4r1p9t8\) | |
| Huawei Mate 10 Firmware | <9.0.0.177\(c185e2r1p12t8\) | |
| Huawei Mate 10 Firmware | <9.0.0.159\(c636e2r1p12t8\) | |
| Huawei Mate 10 Pro Firmware | <9.0.0.167\(c00e87r2p15t8\) | |
| Huawei Mate 10 pro | ||
| Huawei Mate 10 Pro Firmware | <9.0.0.159\(c185e2r1p13t8\) | |
| Huawei Mate 10 Pro Firmware | <9.0.0.161\(c432e4r1p11t8\) | |
| Huawei Mate 10 Pro Firmware | <9.0.0.159\(c636e2r1p13t8\) | |
| Huawei Honor V10 Firmware | <9.0.0.156\(c00e156r2p14t8\) | |
| Huawei Honor V10 | ||
| Huawei Honor V10 Firmware | <9.0.0.159\(c432e4r1p9t8\) | |
| Huawei Honor V10 Firmware | <9.0.0.159\(c636e3r1p12t8\) | |
| Huawei Changxiang 7s Firmware | <9.1.0.107\(c00e107r2p8t8\) | |
| Huawei Changxiang 7s | ||
| Huawei P-smart Firmware | <9.1.0.119\(c636e5r1p1t8\) | |
| Huawei P-smart | ||
| Huawei P-smart Firmware | <9.1.0.130\(c432e8r1p5t8\) | |
| Huawei Changxiang 8 Plus Firmware | <9.1.0.111\(c00e111r1p6t8\) | |
| Huawei Changxiang 8 Plus | ||
| Huawei Y9 2018 Firmware | <9.1.0.115\(c432e5r1p1t8\) | |
| Huawei Y9 2018 | ||
| Huawei Y9 2018 Firmware | <9.1.0.120\(c636e5r1p1t8\) | |
| Huawei Honor 9 Lite Firmware | <9.1.0.113\(c00e111r2p10t8\) | |
| Huawei Honor 9 Lite | ||
| Huawei Honor 9 Lite Firmware | <9.1.0.118\(c636e4r1p1t8\) | |
| Huawei Honor 9 Lite Firmware | <9.1.0.118\(c185e4r1p4t8\) | |
| Huawei Honor 9 Lite Firmware | <9.1.0.121\(c432e4r1p3t8\) | |
| Huawei Honor 9i Firmware | <9.1.0.121\(c432e4r1p3t8\) | |
| Huawei Honor 9i | ||
| Huawei Honor 9i Firmware | <9.1.0.106\(sp53c636e2r1p4t8\) | |
| Huawei Mate 9 Firmware | <9.0.1.158\(c432e6r1p8t8\) | |
| Huawei Mate 9 | ||
| Huawei Mate 9 Firmware | <9.0.1.159\(c636e6r1p8t8\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-5264?
CVE-2019-5264 is an information disclosure vulnerability in certain Huawei smartphones.
Which Huawei smartphones are affected by CVE-2019-5264?
Certain Huawei smartphones including Mate 10, Mate 10 Pro, Honor V10, Changxiang 7S, P-smart, Changxiang 8 Plus, Y9 2018, Honor 9 Lite, Honor 9i, and Mate 9 are affected by CVE-2019-5264.
What is the severity of CVE-2019-5264?
CVE-2019-5264 has a severity score of 4.6 which is classified as medium severity.
How does CVE-2019-5264 impact affected Huawei smartphones?
CVE-2019-5264 can lead to information disclosure as the software does not handle certain information of applications locked by applock in a rare condition.
Is there a fix available for CVE-2019-5264?
To fix CVE-2019-5264, Huawei has released a security advisory with the necessary steps to mitigate the vulnerability. Please refer to the Huawei Security Advisory for more details.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei mate 10 firmware
- canonical/huawei mate 10
- canonical/huawei mate 10 pro firmware
- canonical/huawei mate 10 pro
- canonical/huawei honor v10 firmware
- canonical/huawei honor v10
- canonical/huawei changxiang 7s firmware
- canonical/huawei changxiang 7s
- canonical/huawei p-smart firmware
- canonical/huawei p-smart
- canonical/huawei changxiang 8 plus firmware
- canonical/huawei changxiang 8 plus
- canonical/huawei y9 2018 firmware
- canonical/huawei y9 2018
- canonical/huawei honor 9 lite firmware
- canonical/huawei honor 9 lite
- canonical/huawei honor 9i firmware
- canonical/huawei honor 9i
- canonical/huawei mate 9 firmware
- canonical/huawei mate 9