Double Free Vulnerability in Huawei Smartphones
CVE-2019-5282

7.8HIGH

Key Information:

Vendor

Huawei
Status
Emily-al00a, Emily-tl00b, Emily-l09c, Emily-l29c
Vendor
CVE Published:
13 November 2019

What is CVE-2019-5282?

The Bastet module in selected Huawei smartphones is susceptible to a double free vulnerability. An attacker may deceive users into installing a malicious application that can free the same memory address multiple times. This exploitation could lead to the execution of arbitrary malicious code, compromising device integrity and user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Emily-AL00A, Emily-TL00B, Emily-L09C, Emily-L29C Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.202(C185E2R1P12)

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.