CVE-2019-5216

Description

There is a race condition vulnerability on Huawei Honor V10 smartphones versions earlier than Berkeley-AL20 9.0.0.156(C00E156R2P14T8), Honor 10 smartphones versions earlier than Columbia-AL10B 9.0.0.156(C00E156R1P20T8) and Honor Play smartphones versions earlier than Cornell-AL00A 9.0.0.156(C00E156R1P13T8). An attacker tricks the user into installing a malicious application, which makes multiple processes to operate the same variate at the same time. Successful exploit could cause execution of malicious code.

Risk Information

Base Score

7.0

MODERATE

Vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.084

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-5216 are affected in honor_view_10_firmware berkeley-al20_9.0.0.125(c00e125r2p14t8)	NCM
Vulnerabilities CVE-2019-5216 ,CVE-2019-5295 are affected in honor_view_10_firmware 9.0.0.202(c567e6r1p12t8)	NCM
Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition) Vulnerability (CVE-2019-5216)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234