CVE-2019-5281: Medium severity huawei y9 2019 firmware vulnerability
There is an information leak vulnerability in some Huawei phones, versions earlier than Jackman-L21 8.2.0.155(C185R1P2). When a local attacker uses the camera of a smartphone, the attacker can exploit this vulnerability to obtain sensitive information by performing a series of operations.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this information leak vulnerability?
The vulnerability ID of this information leak vulnerability is CVE-2019-5281.
What is the title of this vulnerability?
The title of this vulnerability is "There is an information leak vulnerability in some Huawei phones versions earlier than Jackman-L21 8.2.0.155(C185R1P2)."
What is the description of this vulnerability?
This vulnerability allows a local attacker who uses the camera of a Huawei smartphone to obtain sensitive information by performing a series of operations.
Which Huawei phones are affected by this vulnerability?
This vulnerability affects Huawei Y9 2019 phones with firmware versions earlier than Jackman-L21 8.2.0.155(C185R1P2).
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is medium with a CVSS score of 4.6.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability on Huawei's official Security Advisories website at: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190218-01-smartphone-en