CVE-2019-5281

Medium

Description

There is an information leak vulnerability in some Huawei phones, versions earlier than Jackman-L21 8.2.0.155(C185R1P2). When a local attacker uses the camera of a smartphone, the attacker can exploit this vulnerability to obtain sensitive information by performing a series of operations.

SeverityMedium
CVSS4.6
Exploit probability—
ProductHuawei Y9 2019 Firmware
PublishedJun 4, 2019
First seenJun 4, 2019

How to fix

Update
  • huawei y9_2019_firmwarejackman-l21_8.2.0.155\(c185r1p2\) or later

Affected products

ProductAffected versionsFixed in
huawei y9_2019_firmwarev < jackman-l21_8.2.0.155\(c185r1p2\)jackman-l21_8.2.0.155\(c185r1p2\)

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.