CVE-2019-5292: Low severity huawei honor 10 lite vulnerability
Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1), the versions before 9.1.0.205(C00E97R1P9), the versions before 9.1.0.205(C00E97R2P2) have an information leak vulnerability. Due to improper function error records of some module, an attacker with the access permission may exploit the vulnerability to obtain some information.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-5292.
Which mobile phones are affected by this vulnerability?
Honor 10 Lite, Honor 8A, and Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1), 9.1.0.205(C00E97R1P9), and 9.1.0.205(C00E97R2P2) are affected by this vulnerability.
What is the severity of CVE-2019-5292?
The severity of CVE-2019-5292 is low, with a severity value of 3.3.
What is the description of CVE-2019-5292?
CVE-2019-5292 is an information leak vulnerability in certain Huawei mobile phone models, including Honor 10 Lite, Honor 8A, and Huawei Y6. It is caused by improper function error records of some modules.
How can I fix CVE-2019-5292?
To fix CVE-2019-5292, Huawei recommends updating the affected mobile phone models to the versions 9.1.0.217(C00E215R3P1), 9.1.0.205(C00E97R1P9), or 9.1.0.205(C00E97R2P2).