Memory Management Vulnerability in Huawei Mate 10 Smartphones
CVE-2019-5305

5.5MEDIUM

Key Information:

Vendor

Huawei
Status
Mate 10
Vendor
CVE Published:
6 June 2019

What is CVE-2019-5305?

A memory double free vulnerability was identified in the image processing module of certain Huawei Mate 10 smartphones. This flaw allows attackers to exploit the application installation process by tricking users into downloading malicious applications. By invoking specific APIs, the malicious application can trigger a double free condition, potentially leading to a system crash and compromise of the device's functionality.

Affected Version(s)

Mate 10 The versions before ALP-L29 9.0.0.159(C185)

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.