CVE-2019-5282

Description

Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.203(C432E7R1P11), Versions earlier than Emily-L29C 9.0.0.202(C185E2R1P12) have a double free vulnerability. An attacker tricks the user into installing a malicious application, which frees on the same memory address twice. Successful exploit could result in malicious code execution.

Risk Information

Base Score

7.8

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.151

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2018-7925 ,CVE-2019-5282 are affected in emily-al00a_firmware 8.1.0.153(c00)	NCM
Vulnerabilities CVE-2018-7925 ,CVE-2018-7947 ,CVE-2019-5282 are affected in emily-al00a_firmware 8.1.0.109(sp5c00)	NCM
Vulnerabilities CVE-2018-7925 ,CVE-2018-7947 ,CVE-2019-5282 are affected in emily-al00a_firmware 8.1.0.108(sp6c00)	NCM
Vulnerabilities CVE-2018-7925 ,CVE-2018-7947 ,CVE-2019-5282 are affected in emily-al00a_firmware 8.1.0.108(sp2c00)	NCM
Vulnerabilities CVE-2018-7925 ,CVE-2018-7947 ,CVE-2019-5282 are affected in emily-al00a_firmware 8.1.0.107(sp7c00)	NCM
Vulnerabilities CVE-2018-7925 ,CVE-2018-7944 ,CVE-2018-7947 ,CVE-2019-5282 are affected in emily-al00a_firmware 8.1.0.107(sp5c00)	NCM
Vulnerabilities CVE-2018-7925 ,CVE-2018-7944 ,CVE-2018-7947 ,CVE-2019-5282 are affected in emily-al00a_firmware 8.1.0.106(sp2c00)	NCM
Vulnerabilities CVE-2018-7925 ,CVE-2018-7947 ,CVE-2019-5282 are affected in emily-al00a_firmware 8.1.0.105(sp6c00)	NCM
Vulnerabilities CVE-2019-5282 are affected in emily-al00a_firmware 8.1.0.190(c00)	NCM
Vulnerabilities CVE-2019-5282 are affected in emily-al00a_firmware 8.1.0.171(c00)	NCM
Double Free Vulnerability (CVE-2019-5282)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234