CVE-2019-5244

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-06-04 · updated 2026-06-17
Weakness: CWE-20

Description

Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361(C636) versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and the application can read some process information, which may cause sensitive information leak.

Affected products

Huawei Mate 9 Pro Fimware: before lon-l29c_8.0.0.361\(c636\) — fixed in lon-l29c_8.0.0.361\(c636\)

How to fix

Upgrade to a fixed version: Huawei Mate 9 Pro Fimware lon-l29c_8.0.0.361\(c636\). Check the vendor advisory for mitigations.

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-informationleak-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-informationleak-en

Get alerted when CVE-2019-5244 or the next vulnerability affects your stack