CVE-2019-5305: Double Free

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2019-5305.

Q: What is the severity of CVE-2019-5305?

The severity of CVE-2019-5305 is high (5.5).

Q: Which Huawei Mate 10 smartphones are affected by CVE-2019-5305?

Some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) are affected by CVE-2019-5305.

Q: How can an attacker exploit CVE-2019-5305?

An attacker can trick a user into installing a malicious application, and the application can call special API to trigger the double free vulnerability.

Q: Is there a fix available for CVE-2019-5305?

Yes, a fix is available. Users should update their Huawei Mate 10 smartphones to ALP-L29 9.0.0.159(C185) or later versions.

Published Jun 6, 2019

Updated

The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a system crash.

Affected Software

2 affected components

huawei Mate 10 Firmware<alp-l29_9.0.0.159\(c185\)

huawei Mate 10

Event History

Jun 6, 2019

CVE Published

via MITRE·02:35 PM

Data Sourced

via MITRE·02:35 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2019-5305.

What is the severity of CVE-2019-5305?

The severity of CVE-2019-5305 is high (5.5).

Which Huawei Mate 10 smartphones are affected by CVE-2019-5305?

Some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) are affected by CVE-2019-5305.

How can an attacker exploit CVE-2019-5305?

An attacker can trick a user into installing a malicious application, and the application can call special API to trigger the double free vulnerability.

Is there a fix available for CVE-2019-5305?