Information Leak Vulnerability in Huawei Smartphones
CVE-2019-5281

4.6MEDIUM

Key Information:

Vendor
Huawei
Vendor
CVE Published:
4 June 2019

Summary

An information leak vulnerability exists in certain Huawei smartphones, where a local attacker can exploit the camera functionality to gain unauthorized access to sensitive data. This issue affects devices with versions prior to Jackman-L21 8.2.0.155(C185R1P2). By executing a specific sequence of actions through the camera, attackers may retrieve confidential information, potentially compromising user privacy and security.

Affected Version(s)

Huawei Y9 2019 Version Earlier Than Jackman-L21 8.2.0.155(C185R1P2)

References

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.