What is CVE-2019-5282?

CVE-2019-5282 is a high-severity vulnerability in Huawei Emily-al00a, classified under Double Free. CVSS score: 7.8/10. Published 2019-11-13.

How severe is CVE-2019-5282?

High severity. CVSS v3 base score is 7.8 out of 10.

Double Free in Huawei Emily-al00a

CVE-2019-5282

Bastet module of some Huawei smartphones with Versions earlier than Emily-AL00A 9.0.0.182(C00E82R1P21), Versions earlier than Emily-TL00B 9.0.0.182(C01E82R1P21), Versions earlier than Emily-L09C 9.0.0.203(C432E7R1P11), Versions earlier tha…

Vulnerability class: Double Free

EPSS: 0.008 (51.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Huawei Emily-al00a
Huawei Emily-al00a_firmware
Huawei Emily-l09c
Huawei Emily-l09c_firmware
Huawei Emily-l29c
Huawei Emily-l29c_firmware
Huawei Emily-tl00b
Huawei Emily-tl00b_firmware
Huawei Hima-l09ca
Huawei Hima-l09ca_firmware

Weakness classification (CWE)

CWE-415 — Double Free

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5282?: CVE-2019-5282 is a high-severity vulnerability in Huawei Emily-al00a, classified under Double Free. CVSS score: 7.8/10. Published 2019-11-13.
How severe is CVE-2019-5282?: High severity. CVSS v3 base score is 7.8 out of 10.