vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-5252

LOW
3.5
CVSS Score
Published: December 13, 2019 at 11:12 PM UTC
Updated: June 17, 2026 at 02:37 AM UTC
12 products affected across 1 vendorHonor 8X FirmwareHonor 9I FirmwareHonor 9 Lite Firmware

Using Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro by N/A?

Get instant alerts when new vulnerabilities affect Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
LOW3.5
Exploit prediction
EPSS 0.2%

Description

There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Enjoy 8 Plus Firmware· Huawei
95%
v < 9.1.0.124(c00e112r1p6t8)
Affected range stops below 9.1.0.124(c00e112r1p6t8), so it looks safe — our inference, not a vendor statement
huawei-enjoy-8-plus (same device)
Honor 8X Firmware· Huawei
95%
v < 9.1.0.217(c00e15r3p2t8)v < 9.1.0.237(c432e1r3p2t8)v < 9.1.0.237(c636e2r4p1t8)
Affected range stops below 9.1.0.217(c00e15r3p2t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.237(c432e1r3p2t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.237(c636e2r4p1t8), so it looks safe — our inference, not a vendor statement
huawei-honor-8x (same device)
Honor 9 Lite Firmware· Huawei
95%
v < 9.1.0.124(c00e112r2p10t8)v < 9.1.0.136(c636e5r1p5t8)
Affected range stops below 9.1.0.124(c00e112r2p10t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.136(c636e5r1p5t8), so it looks safe — our inference, not a vendor statement
huawei-honor-9-lite (same device)
Honor 9I Firmware· Huawei
95%
v < 9.1.0.115(c00e113r1p6t8)v < 9.1.0.122(c636e4r1p4t8)
Affected range stops below 9.1.0.115(c00e113r1p6t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.122(c636e4r1p4t8), so it looks safe — our inference, not a vendor statement
huawei-honor-9i (same device)
Y6 Pro Firmware· Huawei
95%
v < 9.1.0.248(c636e5r3p1)
Affected range stops below 9.1.0.248(c636e5r3p1), so it looks safe — our inference, not a vendor statement
huawei-y6-pro (same device)
Y9 Firmware· Huawei
95%
v < 9.1.0.131(c432e6r1p5t8)
Affected range stops below 9.1.0.131(c432e6r1p5t8), so it looks safe — our inference, not a vendor statement
huawei-y9 (same device)
Honor 8X· Huawei
60%
v < 9.1.0.131
Affected range stops below 9.1.0.131, so it looks safe — our inference, not a vendor statement
Honor 9 Lite· Huawei
60%
v < 9.1.0.131
Affected range stops below 9.1.0.131, so it looks safe — our inference, not a vendor statement
Honor 9i· Huawei
60%
v < 9.1.0.131
Affected range stops below 9.1.0.131, so it looks safe — our inference, not a vendor statement
Y6 Pro· Huawei
60%
v < 9.1.0.131
Affected range stops below 9.1.0.131, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

x_refsource_MISCVendor Advisory
Source: [email protected]
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-smartphone-en

CVSS

3.5LOW[email protected]
Attack Vector
PHYSICAL
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-287

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card