CVE-2019-5216: There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones…

PriorityP429high7CVSS 3.0

AVLACHPRNUIRSUCHIHAH

EPSS

0.68%

48.3th percentile

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
huawei	honor_10_firmware	< columbia-al10b_9.0.0.156\(c00e156r1p20t8\)	columbia-al10b_9.0.0.156\(c00e156r1p20t8\)
huawei	honor_play_firmware	< cornell-al00a_9.0.0.156\(c00e156r1p13t8\)	cornell-al00a_9.0.0.156\(c00e156r1p13t8\)
huawei	honor_view_10_firmware	< berkeley-al20_9.0.0.156\(c00e156r2p14t8\)	berkeley-al20_9.0.0.156\(c00e156r2p14t8\)

CVSS provenance

nvdv3.07.0HIGHCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.07.6HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.