CVE-2019-5214 - There is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.167(C00E85R2P20T8)

Back Back to CVE browser

MEDIUM

There is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.167(C00E85R2P20T8)

Published Jun 6, 2019

5.5

MEDIUM

CVSS 3.0

EPSS 0.59%

Description

There is a use after free vulnerability on certain driver component in Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.167(C00E85R2P20T8). An attacker tricks the user into installing a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause a denial of service condition.

Affected products

Vendor Huawei Product Huawei Mate10 Default
n/a
- Version
  Versions earlier than ALP-AL00B 9.0.0.167(C00E85R2P20T8)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Huawei

Huawei Mate10

n/a

Version	Status	Constraints
Versions earlier than ALP-AL00B 9.0.0.167(C00E85R2P20T8)	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (1)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190109-01-smartphone-en
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190109-01-smartphone-en		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Jun 6, 2019

Updated Aug 4, 2024

Reserved Jan 4, 2019

Link CVE-2019-5214

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-5214

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-5214