Vulnerability Details CVE-2019-5219
There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8). An attacker tricks the user into installing a malicious application, which makes multiple processes operate the same resource at the same time. Successful exploit could cause a denial of service condition.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.9%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
References
Products affected by CVE-2019-5219
-
cpe:2.3:h:huawei:mate_10:-
-
cpe:2.3:o:huawei:mate_10_firmware:-
-
cpe:2.3:o:huawei:mate_10_firmware:10.0.0.143(c00e143r2p4)
-
cpe:2.3:o:huawei:mate_10_firmware:10.0.0.189(c185e6r1p3)
-
cpe:2.3:o:huawei:mate_10_firmware:9.0.0.159(c432e4r1p9t8)
-
cpe:2.3:o:huawei:mate_10_firmware:9.0.0.159(c636e2r1p12t8)
-
cpe:2.3:o:huawei:mate_10_firmware:9.0.0.167(c00e85r2p20t8)
-
cpe:2.3:o:huawei:mate_10_firmware:9.0.0.177(c185e2r1p12t8)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-al00_8.0.0.120(sp2c00)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-al00_8.1.0.311
-
cpe:2.3:o:huawei:mate_10_firmware:alp-al00b_9.0.0.167(c00e85r2p20t8)