Information Leak Vulnerability in Huawei Smartphones
CVE-2019-5281
4.6MEDIUM
Summary
An information leak vulnerability exists in certain Huawei smartphones, where a local attacker can exploit the camera functionality to gain unauthorized access to sensitive data. This issue affects devices with versions prior to Jackman-L21 8.2.0.155(C185R1P2). By executing a specific sequence of actions through the camera, attackers may retrieve confidential information, potentially compromising user privacy and security.
Affected Version(s)
Huawei Y9 2019 Version Earlier Than Jackman-L21 8.2.0.155(C185R1P2)
References
CVSS V3.1
Score:
4.6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved