First published: Tue Jun 04 2019(Updated: )
There is an information leak vulnerability in some Huawei phones, versions earlier than Jackman-L21 8.2.0.155(C185R1P2). When a local attacker uses the camera of a smartphone, the attacker can exploit this vulnerability to obtain sensitive information by performing a series of operations.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Y9 2019 Firmware | <jackman-l21_8.2.0.155\(c185r1p2\) | |
HUAWEI Y9 2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this information leak vulnerability is CVE-2019-5281.
The title of this vulnerability is "There is an information leak vulnerability in some Huawei phones versions earlier than Jackman-L21 8.2.0.155(C185R1P2)."
This vulnerability allows a local attacker who uses the camera of a Huawei smartphone to obtain sensitive information by performing a series of operations.
This vulnerability affects Huawei Y9 2019 phones with firmware versions earlier than Jackman-L21 8.2.0.155(C185R1P2).
The severity rating of this vulnerability is medium with a CVSS score of 4.6.
You can find more information about this vulnerability on Huawei's official Security Advisories website at: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190218-01-smartphone-en