CVE-2019-5264 - CVE House
Back to Database
Status published Medium CVE-2019-5264

There is an information disclosure vulnerability in certain Huawei smartphones...

Vulnerability Description

There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-5264

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9
Vulnerable Versions:
Versions earlier than 9.0.0.167(C00E85R2P20T8), Versions earlier than 9.0.0.159(C432E4R1P9T8), Versions earlier than 9.0.0.177(C185E2R1P12T8), Versions earlier than 9.0.0.159(C636E2R1P12T8), Versions earlier than 9.0.0.167(C00E87R2P15T8), Versions earlier than 9.0.0.159(C185E2R1P13T8), Versions earlier than 9.0.0.161(C432E4R1P11T8), Versions earlier than 9.0.0.159(C636E2R1P13T8), Versions earlier than 9.0.0.156(C00E156R2P14T8), Versions earlier than 9.0.0.159(C636E3R1P12T8), Versions earlier than 9.1.0.107(C00E107R2P8T8), Versions earlier than 9.1.0.119(C636E5R1P1T8), Versions earlier than 9.1.0.130(C432E8R1P5T8), Versions earlier than 9.1.0.111(C00E111R1P6T8), Versions earlier than 9.1.0.115(C432E5R1P1T8), Versions earlier than 9.1.0.120(C636E5R1P1T8), Versions earlier than 9.1.0.113(C00E111R2P10T8), Versions earlier than 9.1.0.118(C636E4R1P1T8), Versions earlier than 9.1.0.118(C185E4R1P4T8), Versions earlier than 9.1.0.121(C432E4R1P3T8), Versions earlier than 9.1.0.112(C00E112R1P6T8), Versions earlier 9.1.0.106(SP53C636E2R1P4T8), Versions earlier than 9.0.1.158(C432E6R1P8T8), Versions earlier than 9.0.1.159(C636E6R1P8T8)

Timeline

Official Publish: December 13th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.