CVE-2019-5299: High severity huawei hima-al00b vulnerability
Huawei mobile phones Hima-AL00Bhave with Versions earlier than HMA-AL00C00B175 have a signature verification bypass vulnerability. Attackers can induce users to install malicious applications. Due to a defect in the signature verification logic, the malicious applications can invoke specific interface to execute malicious code. A successful exploit may result in the execution of arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-5299.
What is the title of the vulnerability?
The title of the vulnerability is 'Huawei mobile phones Hima-AL00Bhave with Versions earlier than HMA-AL00C00B175 have a signature verification bypass vulnerability'.
What is the severity of CVE-2019-5299?
The severity of CVE-2019-5299 is high with a severity value of 7.8.
How does the vulnerability affect Huawei mobile phones?
The vulnerability affects Huawei mobile phones with Hima-AL00B firmware versions earlier than HMA-AL00C00B175.
How can attackers exploit CVE-2019-5299?
Attackers can exploit CVE-2019-5299 by inducing users to install malicious applications that can bypass the signature verification logic.