CVE-2019-5264 (GCVE-0-2019-5264)
Vulnerability from cvelistv5 – Published: 2019-12-13 23:00 – Updated: 2024-08-04 19:47
VLAI
EPSS
VEX
Summary
There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure.
Severity
4.6 (Medium)
CWE
- Information Disclosure
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.huawei.com/en/psirt/security-advisori… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| n/a | Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9 |
Affected:
Versions earlier than 9.0.0.167(C00E85R2P20T8)
Affected: Versions earlier than 9.0.0.159(C432E4R1P9T8) Affected: Versions earlier than 9.0.0.177(C185E2R1P12T8) Affected: Versions earlier than 9.0.0.159(C636E2R1P12T8) Affected: Versions earlier than 9.0.0.167(C00E87R2P15T8) Affected: Versions earlier than 9.0.0.159(C185E2R1P13T8) Affected: Versions earlier than 9.0.0.161(C432E4R1P11T8) Affected: Versions earlier than 9.0.0.159(C636E2R1P13T8) Affected: Versions earlier than 9.0.0.156(C00E156R2P14T8) Affected: Versions earlier than 9.0.0.159(C636E3R1P12T8) Affected: Versions earlier than 9.1.0.107(C00E107R2P8T8) Affected: Versions earlier than 9.1.0.119(C636E5R1P1T8) Affected: Versions earlier than 9.1.0.130(C432E8R1P5T8) Affected: Versions earlier than 9.1.0.111(C00E111R1P6T8) Affected: Versions earlier than 9.1.0.115(C432E5R1P1T8) Affected: Versions earlier than 9.1.0.120(C636E5R1P1T8) Affected: Versions earlier than 9.1.0.113(C00E111R2P10T8) Affected: Versions earlier than 9.1.0.118(C636E4R1P1T8) Affected: Versions earlier than 9.1.0.118(C185E4R1P4T8) Affected: Versions earlier than 9.1.0.121(C432E4R1P3T8) Affected: Versions earlier than 9.1.0.112(C00E112R1P6T8) Affected: Versions earlier 9.1.0.106(SP53C636E2R1P4T8) Affected: Versions earlier than 9.0.1.158(C432E6R1P8T8) Affected: Versions earlier than 9.0.1.159(C636E6R1P8T8) |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-04T19:47:56.839Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Versions earlier than 9.0.0.167(C00E85R2P20T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.0.159(C432E4R1P9T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.0.177(C185E2R1P12T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.0.159(C636E2R1P12T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.0.167(C00E87R2P15T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.0.159(C185E2R1P13T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.0.161(C432E4R1P11T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.0.159(C636E2R1P13T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.0.156(C00E156R2P14T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.0.159(C636E3R1P12T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.107(C00E107R2P8T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.119(C636E5R1P1T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.130(C432E8R1P5T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.111(C00E111R1P6T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.115(C432E5R1P1T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.120(C636E5R1P1T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.113(C00E111R2P10T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.118(C636E4R1P1T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.118(C185E4R1P4T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.121(C432E4R1P3T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.1.0.112(C00E112R1P6T8)"
},
{
"status": "affected",
"version": "Versions earlier 9.1.0.106(SP53C636E2R1P4T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.1.158(C432E6R1P8T8)"
},
{
"status": "affected",
"version": "Versions earlier than 9.0.1.159(C636E6R1P8T8)"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Information Disclosure",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-12-13T23:00:29.000Z",
"orgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"shortName": "huawei"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "psirt@huawei.com",
"ID": "CVE-2019-5264",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9",
"version": {
"version_data": [
{
"version_value": "Versions earlier than 9.0.0.167(C00E85R2P20T8)"
},
{
"version_value": "Versions earlier than 9.0.0.159(C432E4R1P9T8)"
},
{
"version_value": "Versions earlier than 9.0.0.177(C185E2R1P12T8)"
},
{
"version_value": "Versions earlier than 9.0.0.159(C636E2R1P12T8)"
},
{
"version_value": "Versions earlier than 9.0.0.167(C00E87R2P15T8)"
},
{
"version_value": "Versions earlier than 9.0.0.159(C185E2R1P13T8)"
},
{
"version_value": "Versions earlier than 9.0.0.161(C432E4R1P11T8)"
},
{
"version_value": "Versions earlier than 9.0.0.159(C636E2R1P13T8)"
},
{
"version_value": "Versions earlier than 9.0.0.156(C00E156R2P14T8)"
},
{
"version_value": "Versions earlier than 9.0.0.159(C432E4R1P9T8)"
},
{
"version_value": "Versions earlier than 9.0.0.159(C636E3R1P12T8)"
},
{
"version_value": "Versions earlier than 9.1.0.107(C00E107R2P8T8)"
},
{
"version_value": "Versions earlier than 9.1.0.119(C636E5R1P1T8)"
},
{
"version_value": "Versions earlier than 9.1.0.130(C432E8R1P5T8)"
},
{
"version_value": "Versions earlier than 9.1.0.111(C00E111R1P6T8)"
},
{
"version_value": "Versions earlier than 9.1.0.115(C432E5R1P1T8)"
},
{
"version_value": "Versions earlier than 9.1.0.120(C636E5R1P1T8)"
},
{
"version_value": "Versions earlier than 9.1.0.113(C00E111R2P10T8)"
},
{
"version_value": "Versions earlier than 9.1.0.118(C636E4R1P1T8)"
},
{
"version_value": "Versions earlier than 9.1.0.118(C185E4R1P4T8)"
},
{
"version_value": "Versions earlier than 9.1.0.121(C432E4R1P3T8)"
},
{
"version_value": "Versions earlier than 9.1.0.112(C00E112R1P6T8)"
},
{
"version_value": "Versions earlier 9.1.0.106(SP53C636E2R1P4T8)"
},
{
"version_value": "Versions earlier than 9.0.1.158(C432E6R1P8T8)"
},
{
"version_value": "Versions earlier than 9.0.1.159(C636E6R1P8T8)"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Information Disclosure"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en",
"refsource": "MISC",
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e",
"assignerShortName": "huawei",
"cveId": "CVE-2019-5264",
"datePublished": "2019-12-13T23:00:29.000Z",
"dateReserved": "2019-01-04T00:00:00.000Z",
"dateUpdated": "2024-08-04T19:47:56.839Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2019-5264",
"date": "2026-10-01",
"epss": "0.00234",
"percentile": "0.12958"
},
"nvd": {
"cve": {
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7BB97444-78F0-42E8-BFD9-B89581D3CF78",
"versionEndExcluding": "9.0.0.167\\(c00e85r2p20t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "394490F2-5E47-4A28-A71C-075DBBA34C9E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "BA00374C-6305-4345-8519-4B499A20F99F",
"versionEndExcluding": "9.0.0.159\\(c432e4r1p9t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "394490F2-5E47-4A28-A71C-075DBBA34C9E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "51F963B1-C9D3-44A4-B7C9-206FF9A2503A",
"versionEndExcluding": "9.0.0.177\\(c185e2r1p12t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "394490F2-5E47-4A28-A71C-075DBBA34C9E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2990333D-857C-4C65-B940-978447168E23",
"versionEndExcluding": "9.0.0.159\\(c636e2r1p12t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "394490F2-5E47-4A28-A71C-075DBBA34C9E",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mate_10_pro_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7C97C82D-1965-4B5D-A5BF-796E07B6E12E",
"versionEndExcluding": "9.0.0.167\\(c00e87r2p15t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mate_10_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5FC0AD4F-0368-4F29-ACCF-B948B8C6BE05",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mate_10_pro_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8D17EEA8-3102-42D0-ABDB-A07B180F7C4A",
"versionEndExcluding": "9.0.0.159\\(c185e2r1p13t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mate_10_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5FC0AD4F-0368-4F29-ACCF-B948B8C6BE05",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mate_10_pro_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "292942FC-5A4B-4E4D-B6F9-B1FB22241282",
"versionEndExcluding": "9.0.0.161\\(c432e4r1p11t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mate_10_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5FC0AD4F-0368-4F29-ACCF-B948B8C6BE05",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mate_10_pro_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8551C436-EB83-4982-A896-1804F5706C97",
"versionEndExcluding": "9.0.0.159\\(c636e2r1p13t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mate_10_pro:-:*:*:*:*:*:*:*",
"matchCriteriaId": "5FC0AD4F-0368-4F29-ACCF-B948B8C6BE05",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:honor_v10_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "EC77875A-B792-4F5B-9D79-A88121825CE1",
"versionEndExcluding": "9.0.0.156\\(c00e156r2p14t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:honor_v10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "592CF37A-83FA-4C85-B5E7-1DB2297A77A0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:honor_v10_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "AB619BE5-AEF8-4BB1-8700-198C9536A37D",
"versionEndExcluding": "9.0.0.159\\(c432e4r1p9t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:honor_v10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "592CF37A-83FA-4C85-B5E7-1DB2297A77A0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:honor_v10_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4E15EECD-43B1-40CA-9491-F07DF8F468B6",
"versionEndExcluding": "9.0.0.159\\(c636e3r1p12t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:honor_v10:-:*:*:*:*:*:*:*",
"matchCriteriaId": "592CF37A-83FA-4C85-B5E7-1DB2297A77A0",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:changxiang_7s_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "FA7A8043-4A12-42FD-A17E-FF175F20E14A",
"versionEndExcluding": "9.1.0.107\\(c00e107r2p8t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:changxiang_7s:-:*:*:*:*:*:*:*",
"matchCriteriaId": "C49A64F9-A264-42F8-8213-10F893AF4520",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:p-smart_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "AA9D516B-8474-4194-97D3-155B13975A75",
"versionEndExcluding": "9.1.0.119\\(c636e5r1p1t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:p-smart:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EA90F70B-C5A2-4B14-AECA-B2014FAFC3C2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:p-smart_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "449025DE-ABD7-437E-9B4A-7541CC184E19",
"versionEndExcluding": "9.1.0.130\\(c432e8r1p5t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:p-smart:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EA90F70B-C5A2-4B14-AECA-B2014FAFC3C2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:changxiang_8_plus_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "455F22C9-E60D-4335-9780-8068FB42DEFC",
"versionEndExcluding": "9.1.0.111\\(c00e111r1p6t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:changxiang_8_plus:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ED01DFA5-3411-4D0D-B41D-9D6E3AD620FB",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:y9_2018_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "69DBAFE8-3B9B-4F2A-A902-8FA9E76B6815",
"versionEndExcluding": "9.1.0.115\\(c432e5r1p1t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:y9_2018:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8B8ED2EF-8C0B-48E7-BB76-261F1BE3B857",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:y9_2018_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "27FB85CA-EE8E-47E6-8BC6-D0D3F78E310B",
"versionEndExcluding": "9.1.0.120\\(c636e5r1p1t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:y9_2018:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8B8ED2EF-8C0B-48E7-BB76-261F1BE3B857",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:honor_9_lite_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "287546B5-A7EF-44A0-8EA9-80809C40E916",
"versionEndExcluding": "9.1.0.113\\(c00e111r2p10t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:honor_9_lite:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E571CDA8-577E-4165-A960-DAD978FD23BC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:honor_9_lite_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "61024F08-FAB3-442D-81A1-14E42B3F154B",
"versionEndExcluding": "9.1.0.118\\(c636e4r1p1t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:honor_9_lite:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E571CDA8-577E-4165-A960-DAD978FD23BC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:honor_9_lite_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "49DEB50F-8345-4509-88A8-9F804D13C358",
"versionEndExcluding": "9.1.0.118\\(c185e4r1p4t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:honor_9_lite:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E571CDA8-577E-4165-A960-DAD978FD23BC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:honor_9_lite_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "C15176A7-3D9B-461B-BF23-82DBABDFB764",
"versionEndExcluding": "9.1.0.121\\(c432e4r1p3t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:honor_9_lite:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E571CDA8-577E-4165-A960-DAD978FD23BC",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:honor_9i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "4A952DE4-CE00-42FB-BDBF-B024B2ABB004",
"versionEndExcluding": "9.1.0.121\\(c432e4r1p3t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:honor_9i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F931151C-4D0A-44D1-9417-B467F7E148A2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:honor_9i_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "76911BF2-6AA5-4E8F-A0C2-50488C9645D3",
"versionEndExcluding": "9.1.0.106\\(sp53c636e2r1p4t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:honor_9i:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F931151C-4D0A-44D1-9417-B467F7E148A2",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3574DAD1-E9B6-4D18-BD26-5EE85FB11412",
"versionEndExcluding": "9.0.1.158\\(c432e6r1p8t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
"matchCriteriaId": "93FB7D8B-A819-4CBB-85D1-D3984D963351",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8C743611-3E88-43E1-884D-FCB906870D01",
"versionEndExcluding": "9.0.1.159\\(c636e6r1p8t8\\)",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:*",
"matchCriteriaId": "93FB7D8B-A819-4CBB-85D1-D3984D963351",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "There is an information disclosure vulnerability in certain Huawei smartphones (Mate 10;Mate 10 Pro;Honor V10;Changxiang 7S;P-smart;Changxiang 8 Plus;Y9 2018;Honor 9 Lite;Honor 9i;Mate 9). The software does not properly handle certain information of applications locked by applock in a rare condition. Successful exploit could cause information disclosure."
},
{
"lang": "es",
"value": "tiene una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n en ciertos tel\u00e9fonos inteligentes Huawei (Mate 10; Mate 10 Pro; Honor V10; Changxiang 7S; P-smart; Changxiang 8 Plus; Y9 2018; Honor 9 Lite; Honor 9i; Mate 9). El software no maneja apropiadamente cierta informaci\u00f3n de aplicaciones bloqueadas mediante applock en una condici\u00f3n extra\u00f1a. La explotaci\u00f3n con \u00e9xito podr\u00eda causar una divulgaci\u00f3n de informaci\u00f3n."
}
],
"id": "CVE-2019-5264",
"lastModified": "2024-11-21T04:44:38.040",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 2.1,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "NONE",
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"exploitabilityScore": 0.9,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-12-13T23:15:12.050",
"references": [
{
"source": "psirt@huawei.com",
"tags": [
"Vendor Advisory"
],
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191211-01-smartphone-en"
}
],
"sourceIdentifier": "psirt@huawei.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…