« Volver al listado

CVE-2019-5236

Estado: ModificadaMedia (6.3)—

Huawei smart phones Emily-L29C with versions of 8.1.0.132a(C432), 8.1.0.135(C782), 8.1.0.154(C10), 8.1.0.154(C461), 8.1.0.154(C635), 8.1.0.156(C185), 8.1.0.156(C605), 8.1.0.159(C636) have a double free vulnerability. An attacker can trick a user to click a URL to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Huawei — Emily-l29c Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-5236",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@huawei.com",
      "affectedData": [
        {
          "vendor": "Huawei",
          "product": "Emily-L29C",
          "versions": [
            {
              "status": "affected",
              "version": "8.1.0.132a(C432)"
            },
            {
              "status": "affected",
              "version": "8.1.0.135(C782)"
            },
            {
              "status": "affected",
              "version": "8.1.0.154(C10)"
            },
            {
              "status": "affected",
              "version": "8.1.0.154(C461)"
            },
            {
              "status": "affected",
              "version": "8.1.0.154(C635)"
            },
            {
              "status": "affected",
              "version": "8.1.0.156(C185)"
            },
            {
              "status": "affected",
              "version": "8.1.0.156(C605)"
            },
            {
              "status": "affected",
              "version": "8.1.0.159(C636)"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-08-08T17:15:11.237",
  "references": [
    {
      "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190807-01-smartphone-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@huawei.com"
    },
    {
      "url": "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190807-01-smartphone-en",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-415"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Huawei smart phones Emily-L29C with versions of 8.1.0.132a(C432), 8.1.0.135(C782), 8.1.0.154(C10), 8.1.0.154(C461), 8.1.0.154(C635), 8.1.0.156(C185), 8.1.0.156(C605), 8.1.0.159(C636) have a double free vulnerability. An attacker can trick a user to click a URL to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal."
    },
    {
      "lang": "es",
      "value": "Huawei smart phones Emily-L29C con versiones de 8.1.0.132a (C432), 8.1.0.135 (C782), 8.1.0.154 (C10), 8.1.0.154 (C461), 8.1.0.154 (C635), 8.1.0.156 (C185 ), 8.1.0.156 (C605), 8.1.0.159 (C636) tienen una doble vulnerabilidad libre. Un atacante puede engañar a un usuario para que haga clic en una URL para aprovechar esta vulnerabilidad. La explotación exitosa puede causar que el teléfono afectado sea anormal."
    }
  ],
  "lastModified": "2026-06-17T02:37:21.120",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:huawei:emily-l29c_firmware:8.1.0.132a\\(c432\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E140068C-E5BD-4D32-B4D7-ECD89C934F02"
            },
            {
              "criteria": "cpe:2.3:o:huawei:emily-l29c_firmware:8.1.0.135\\(c782\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5381178B-59D7-4008-A6B2-46C559123EAA"
            },
            {
              "criteria": "cpe:2.3:o:huawei:emily-l29c_firmware:8.1.0.154\\(c10\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8CB47C7-08CA-4EA3-9F4A-1C41A69696D1"
            },
            {
              "criteria": "cpe:2.3:o:huawei:emily-l29c_firmware:8.1.0.154\\(c461\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3B106328-9FE3-47BF-B82F-F5694482A930"
            },
            {
              "criteria": "cpe:2.3:o:huawei:emily-l29c_firmware:8.1.0.154\\(c635\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6B68E41F-C8A1-459A-9A58-A77FAB452AA3"
            },
            {
              "criteria": "cpe:2.3:o:huawei:emily-l29c_firmware:8.1.0.156\\(c185\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "85B2B2B1-D250-4ED3-8724-4FB208514DA1"
            },
            {
              "criteria": "cpe:2.3:o:huawei:emily-l29c_firmware:8.1.0.156\\(c605\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF895541-98C9-4520-9CAF-36CA963F9BA0"
            },
            {
              "criteria": "cpe:2.3:o:huawei:emily-l29c_firmware:8.1.0.159\\(c636\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0D744CB-FF68-471D-AD33-5074275D181B"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:huawei:emily-l29c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5D370342-02DA-4859-B98B-0A3F78EACAEE"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@huawei.com"
}