NetSight
high7.0

CVE-2019-5216

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones ver…

Impact

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.

Affected products

VendorProductAffected versions
HuaweiHonor View 10 Firmware
before berkeley-al20_9.0.0.156\(c00e156r2p14t8\)
HuaweiHonor 10 Firmware
before columbia-al10b_9.0.0.156\(c00e156r1p20t8\)
HuaweiHonor Play Firmware
before cornell-al00a_9.0.0.156\(c00e156r1p13t8\)

Weakness classification

References