Vulnerability Details CVE-2019-5216
There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.3%
CVSS Severity
CVSS v3 Score 7.0
CVSS v2 Score 7.6
References
Products affected by CVE-2019-5216
-
cpe:2.3:h:huawei:honor_10:-
-
cpe:2.3:h:huawei:honor_play:-
-
cpe:2.3:h:huawei:honor_view_10:-
-
cpe:2.3:o:huawei:honor_10_firmware:10.0.0.178(c00e178r1p4)
-
cpe:2.3:o:huawei:honor_10_firmware:9.1.0.350(c10e5r1p14t8)
-
cpe:2.3:o:huawei:honor_10_firmware:9.1.0.350(c185e3r1p12t8)
-
cpe:2.3:o:huawei:honor_10_firmware:9.1.0.350(c461e3r1p11t8)
-
cpe:2.3:o:huawei:honor_10_firmware:9.1.0.350(c636e3r1p13t8)
-
cpe:2.3:o:huawei:honor_10_firmware:9.1.0.351(c432e5r1p13t8)
-
cpe:2.3:o:huawei:honor_play_firmware:-
-
cpe:2.3:o:huawei:honor_play_firmware:9.1.0.333(c00e333r1p1t8)
-
cpe:2.3:o:huawei:honor_view_10_firmware:-
-
cpe:2.3:o:huawei:honor_view_10_firmware:9.0.0.202(c567e6r1p12t8)
-
cpe:2.3:o:huawei:honor_view_10_firmware:berkeley-al20_9.0.0.125(c00e125r2p14t8)