What’s Vulnerable › Vulnerabilities

CVE-2019-5217

• Severity: medium (CVSS 4.6 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-04 · updated 2026-06-17
• Weakness: CWE-307

Description

There is an information disclosure vulnerability on Mate 9 Pro Huawei smartphones versions earlier than LON-AL00B9.0.1.150 (C00E61R1P8T8). An attacker could view the photos after a series of operations without unlocking the screen lock. Successful exploit could cause an information disclosure condition.

Affected products

• Huawei Technologies Co., Ltd. Mate 9 Pro: before lon-al00b9.0.1.150\(c00e61r1p8t8\) — fixed in lon-al00b9.0.1.150\(c00e61r1p8t8\)

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. Mate 9 Pro lon-al00b9.0.1.150\(c00e61r1p8t8\). Check the vendor advisory for mitigations.

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190417-01-smartphone-en
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190417-01-smartphone-en

Get alerted when CVE-2019-5217 or the next vulnerability affects your stack