CVE-2019-5292

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-11-13 · updated 2026-06-17

Description

Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the versions before 9.1.0.217(C00E215R3P1), the versions before 9.1.0.205(C00E97R1P9), the versions before 9.1.0.205(C00E97R2P2) have an information leak vulnerability. Due to improper function error records of some module, an attacker with the access permission may exploit the vulnerability to obtain some information.

Affected products

Huawei Honor 10 Lite Firmware: before 9.1.0.217\(c00e215r3p1\) — fixed in 9.1.0.217\(c00e215r3p1\)
Huawei Honor 8A Firmware: before 9.1.0.205\(c00e97r1p9\) — fixed in 9.1.0.205\(c00e97r1p9\)
Huawei Y6 Firmware: before 9.1.0.205\(c00e97r2p2\) — fixed in 9.1.0.205\(c00e97r2p2\)

How to fix

Upgrade to a fixed version: Huawei Honor 10 Lite Firmware 9.1.0.217\(c00e215r3p1\); Huawei Honor 8A Firmware 9.1.0.205\(c00e97r1p9\); Huawei Y6 Firmware 9.1.0.205\(c00e97r2p2\). Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-5292 or the next vulnerability affects your stack