CVE-2019-5252

There is an improper authentication vulnerability in Huawei smartphones (Y9, Honor 8X, Honor 9 Lite, Honor 9i, Y6 Pro). The applock does not perform a sufficient authentication in a rare condition. Successful exploit could allow the attacker to use the application locked by applock in an instant.

• CWE-287

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-smartphone-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-01-smartphone-enVendor Advisory

Published

Dec 14, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5245HiSuite 9.1.0.300 versions and earlier contains a DLL hijack…
• CVE-2019-5246Smartphones with software of ELLE-AL00B 9.1.0.109(C00E106R1P…6.2
• CVE-2019-5247Huawei Atlas 300, Atlas 500 have a buffer overflow vulnerabi…5.5
• CVE-2019-5248CloudEngine 12800 has a DoS vulnerability. An attacker of a …7.4
• CVE-2019-5250Mate 20 Pro smartphones with versions earlier than 9.1.0.135…7.8
• CVE-2019-5251There is a path traversal vulnerability in several Huawei sm…5.5
• CVE-2019-5253E5572-855 with versions earlier than 8.0.1.3(H335SP1C233) ha…5.9
• CVE-2019-5254Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP63…8.6
• CVE-2019-5255Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP63…5.5
• CVE-2019-5256Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP63…5.5
• CVE-2019-5257Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP63…5.5
• CVE-2019-5258Certain Huawei products (AP2000;IPS Module;NGFW Module;NIP63…5.5