CVE-2019-5281: Huawei y9 2019 Firmware

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

There is an information leak vulnerability in some Huawei phones, versions earlier than Jackman-L21 8.2.0.155(C185R1P2). When a local attacker uses the camera of a smartphone, the attacker can exploit this vulnerability to obtain sensitive information by performing a series of operations.

Affected products

• Huawei y9 2019 Firmware: before jackman-l21_8.2.0.155\(c185r1p2\) (fixed in jackman-l21_8.2.0.155\(c185r1p2\))

Published 2019-06-04. Last modified 2026-06-17.