CVE:CVE-2019-5252
CNNVD:CNNVD-201912-203
Huawei Y9等都是中国华为（Huawei）公司的一款智能手机。
多款Huawei产品中存在授权问题漏洞，该漏洞源于应用锁有时会无法充分地执行校验。攻击者可利用该漏洞在极短的时间内使用被锁应用。以下产品及版本受到影响：Huawei Y6 Pro 9.1.0.248(C636E5R3P1)之前版本；Y9 9.1.0.131(C432E6R1P5T8)之前版本，9.1.0.139(C636E6R1P5T8)之前版本；Honor 8X 9.1.0.217(C00E15R3P2T8)之前版本，9.1.0.237(C432E1R3P2T8)之前版本，9.1.0.237(C636E2R4P1T8)之前版本；Honor 9 Lite 9.1.0.124(C00E112R2P10T8)之前版本，9.1.0.136(C636E5R1P5T8)之前版本；Honor 9i 9.1.0.115(C00E113R1P6T8)之前版本，9.1.0.122(C636E4R1P4T8)之前版本；畅享8 Plus 9.1.0.124(C00E112R1P6T8)之前版本。
solution:Upgrade huawei enjoy_8_plus_firmware to a higher version than 9.1.0.124\(c00e112r1p6t8\,and avoid the version (,9.1.0.124\(c00e112r1p6t8\)); Upgrade huawei y9_firmware to a higher version than 9.1.0.131\(c432e6r1p5t8\,and avoid the version (,9.1.0.131\(c432e6r1p5t8\)); Upgrade huawei honor_8x_firmware to a higher version than 9.1.0.217\(c00e15r3p2t8\,9.1.0.237\(c432e1r3p2t8\,9.1.0.237\(c636e2r4p1t8\,and avoid the version (,9.1.0.217\(c00e15r3p2t8\)),(,9.1.0.237\(c432e1r3p2t8\)),(,9.1.0.237\(c636e2r4p1t8\)); Upgrade huawei honor_9_lite_firmware to a higher version than 9.1.0.124\(c00e112r2p10t8\,9.1.0.136\(c636e5r1p5t8\,and avoid the version (,9.1.0.124\(c00e112r2p10t8\)),(,9.1.0.136\(c636e5r1p5t8\)); Upgrade huawei honor_9i_firmware to a higher version than 9.1.0.115\(c00e113r1p6t8\,9.1.0.122\(c636e4r1p4t8\,and avoid the version (,9.1.0.115\(c00e113r1p6t8\)),(,9.1.0.122\(c636e4r1p4t8\)); Upgrade huawei y6_pro_firmware to a higher version than 9.1.0.248\(c636e5r3p1\,and avoid the version (,9.1.0.248\(c636e5r3p1\))