CVE-2019-5244 Information disclosure in Mate 9 Pro
An attacker can trick a root-privileged user into installing a malicious app that reads process information, leading to sensitive data leakage on Huawei Mate 9 Pro devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-5244?
CVE-2019-5244 is a medium-severity vulnerability in Huawei Mate 9 Pro, published on 4 Jun 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361(C636) versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and the application can read some process information, which may cause sensitive information leak.
Weakness: CWE-20
Which versions are affected by CVE-2019-5244?
It affects 1 product.
Products include Huawei Mate 9 Pro Fimware.
How do I fix CVE-2019-5244?
No fix has been published for CVE-2019-5244 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-5244 being exploited?
There is no known exploitation of CVE-2019-5244 in the wild and no public exploit code.
Other vulnerabilities in Huawei Mate 9 Pro
Sources
Also known as GHSA-h243-hj7h-322p.