CVE-2019-5281

4.6MEDIUM

Key Information:

Vendor
Huawei
Status
Huawei Y9 2019
Vendor
CVE Published:
4 June 2019

Summary

There is an information leak vulnerability in some Huawei phones, versions earlier than Jackman-L21 8.2.0.155(C185R1P2). When a local attacker uses the camera of a smartphone, the attacker can exploit this vulnerability to obtain sensitive information by performing a series of operations.

Affected Version(s)

Huawei Y9 2019 Version Earlier Than Jackman-L21 8.2.0.155(C185R1P2)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.