CVE-2019-5305

5.5 mediumEPSS 0.6%

Medium (5.5) in huawei mate 10 firmware. EPSS 0.6% chance of exploitation in the next 30 days.

The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which could trigger double free and cause a system crash.

Severity

CVSS 3.0

5.5 medium

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-415
Published: 2019-06-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:mate_10_firmware

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190128-01-ivp-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190128-01-ivp-en

Check your stack JSON