5.3

CVE-2019-5235

Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Alp-al00b Firmware Version 8.0.0.153(c00)
   Huawei ≫ Alp-al00b Version -
Huawei ≫ Alp-tl00b Firmware Version 8.0.0.129(sp2c01)
   Huawei ≫ Alp-tl00b Version -
Huawei ≫ Bla-al00b Firmware Version 8.0.0.129(sp2c786)
   Huawei ≫ Bla-al00b Version -
Huawei ≫ Bla-al00b Firmware Version 8.0.0.153(c00)
   Huawei ≫ Bla-al00b Version -
Huawei ≫ Bla-tl00b Firmware Version 8.0.0.129(sp2c01)
   Huawei ≫ Bla-tl00b Version -
Huawei ≫ Charlotte-al00a Firmware Version 8.1.0.176(c00)
   Huawei ≫ Charlotte-al00a Version -
Huawei ≫ Charlotte-tl00b Firmware Version 8.1.0.176(c01)
   Huawei ≫ Charlotte-tl00b Version -
Huawei ≫ Columbia-al10b Firmware Version 8.1.0.163(c00)
   Huawei ≫ Columbia-al10b Version -
Huawei ≫ Columbia-al10i Firmware Version 8.1.0.150(c675custc675d2)
   Huawei ≫ Columbia-al10i Version -
Huawei ≫ Columbia-l29d Firmware Version 8.1.0.146(c461)
   Huawei ≫ Columbia-l29d Version -
Huawei ≫ Columbia-l29d Firmware Version 8.1.0.148(c185)
   Huawei ≫ Columbia-l29d Version -
Huawei ≫ Columbia-l29d Firmware Version 8.1.0.151(c10)
   Huawei ≫ Columbia-l29d Version -
Huawei ≫ Columbia-l29d Firmware Version 8.1.0.151(c432)
   Huawei ≫ Columbia-l29d Version -
Huawei ≫ Columbia-tl00d Firmware Version 8.1.0.186(c01gt)
   Huawei ≫ Columbia-tl00d Version -
Huawei ≫ Elle-al00b Firmware Version 9.1.0.162(c00e160r2p1)
   Huawei ≫ Elle-al00b Version -
Huawei ≫ Elle-tl00b Firmware Version 9.1.0.162(c01e160r2p1)
   Huawei ≫ Elle-tl00b Version -
Huawei ≫ Emily-al00a Firmware Version 8.1.0.190(c00)
   Huawei ≫ Emily-al00a Version -
Huawei ≫ Emily-tl00b Firmware Version 8.1.0.175(c01)
   Huawei ≫ Emily-tl00b Version -
Huawei ≫ Ever-al00b Firmware Version 9.0.0.195(c00e195r2p1)
   Huawei ≫ Ever-al00b Version -
Huawei ≫ Ever-l29b Firmware Version 9.0.0.206(c185e3r3p1)
   Huawei ≫ Ever-l29b Version -
Huawei ≫ Ever-l29b Firmware Version 9.0.0.207(c636e3r2p1)
   Huawei ≫ Ever-l29b Version -
Huawei ≫ Ever-l29b Firmware Version 9.0.0.208(c432e3r1p12)
   Huawei ≫ Ever-l29b Version -
Huawei ≫ Harry-al00c Firmware Version 9.1.0.206(c00e205r3p1)
   Huawei ≫ Harry-al00c Version -
Huawei ≫ Harry-al10b Firmware Version -
   Huawei ≫ Harry-al10b Version -
Huawei ≫ Harry-al10b Firmware Version 9.1.0.206(c00e205r3p1)
   Huawei ≫ Harry-al10b Version -
Huawei ≫ Harry-tl00c Firmware Version 9.0.1.162(c01e160r2p3)
   Huawei ≫ Harry-tl00c Version -
Huawei ≫ Hima-al00b Firmware Version 9.0.0.200(c00e200r2p1)
   Huawei ≫ Hima-al00b Version -
Huawei ≫ Jackman-l21 Firmware Version 8.2.0.160(c185)
   Huawei ≫ Jackman-l21 Version -
Huawei ≫ Jackman-l22 Firmware Version 8.2.0.156(c636r2p2)
   Huawei ≫ Jackman-l22 Version -
Huawei ≫ Jackman-l23 Firmware Version 8.2.0.152(c45custc45d1)
   Huawei ≫ Jackman-l23 Version -
Huawei ≫ Jackman-l23 Firmware Version 8.2.0.162(c605)
   Huawei ≫ Jackman-l23 Version -
Huawei ≫ Johnson-al00ic Firmware Version 8.2.0.161(c675custc675d1)
   Huawei ≫ Johnson-al00ic Version -
Huawei ≫ Johnson-al10c Firmware Version 8.2.0.165(c00r1p16)
   Huawei ≫ Johnson-al10c Version -
Huawei ≫ Johnson-l21c Firmware Version 8.2.0.130(c461r1p1)
   Huawei ≫ Johnson-l21c Version -
Huawei ≫ Johnson-l21c Firmware Version 8.2.0.131(c10r2p2)
   Huawei ≫ Johnson-l21c Version -
Huawei ≫ Johnson-l21c Firmware Version 8.2.0.136(c432custc432d1)
   Huawei ≫ Johnson-l21c Version -
Huawei ≫ Johnson-l21d Firmware Version 8.2.0.101(c10custc10d1)
   Huawei ≫ Johnson-l21d Version -
Huawei ≫ Johnson-l21d Firmware Version 8.2.0.101(c432custc432d1)
   Huawei ≫ Johnson-l21d Version -
Huawei ≫ Johnson-l21d Firmware Version 8.2.0.131(c55custc55d1)
   Huawei ≫ Johnson-l21d Version -
Huawei ≫ Johnson-l22c Firmware Version 8.2.0.105(c185r1p1)
   Huawei ≫ Johnson-l22c Version -
Huawei ≫ Johnson-l22c Firmware Version 8.2.0.107(c636r2p1)
   Huawei ≫ Johnson-l22c Version -
Huawei ≫ Johnson-l22d Firmware Version 8.2.0.105(c185r2p1)
   Huawei ≫ Johnson-l22d Version -
Huawei ≫ Johnson-l22d Firmware Version 8.2.0.107(c636r2p1)
   Huawei ≫ Johnson-l22d Version -
Huawei ≫ Johnson-l23c Firmware Version 8.2.0.130(c636custc636d2)
   Huawei ≫ Johnson-l23c Version -
Huawei ≫ Johnson-l23c Firmware Version 8.2.0.133(c605custc605d1)
   Huawei ≫ Johnson-l23c Version -
Huawei ≫ Johnson-l42ic Firmware Version 8.2.0.155(c675r2p1)
   Huawei ≫ Johnson-l42ic Version -
Huawei ≫ Johnson-l42ie Firmware Version 8.2.0.155(c675r2p1)
   Huawei ≫ Johnson-l42ie Version -
Huawei ≫ Johnson-l42if Firmware Version 8.2.0.155(c675r2p1)
   Huawei ≫ Johnson-l42if Version -
Huawei ≫ Johnson-tl00d Firmware Version 8.2.0.100(c541custc541d1)
   Huawei ≫ Johnson-tl00d Version -
Huawei ≫ Johnson-tl00d Firmware Version 8.2.0.165(c01r1p16)
   Huawei ≫ Johnson-tl00d Version -
Huawei ≫ Johnson-tl00f Firmware Version 8.2.0.100(c541custc541d1)
   Huawei ≫ Johnson-tl00f Version -
Huawei ≫ Laya-al00ep Firmware Version 9.0.0.201(c786e200r2p1)
   Huawei ≫ Laya-al00ep Version -
Huawei ≫ Neo-al00d Firmware Version 8.1.0.175(c786)
   Huawei ≫ Neo-al00d Version -
Huawei ≫ Potter-al00c Firmware Version 9.1.0.208(c00e205r3p1)
   Huawei ≫ Potter-al00c Version -
Huawei ≫ Potter-al10a Firmware Version 9.1.0.208(c00e205r3p1)
   Huawei ≫ Potter-al10a Version -
Huawei ≫ Princeton-al10b Firmware Version 9.1.0.211(c00e203r2p2)
   Huawei ≫ Princeton-al10b Version -
Huawei ≫ Princeton-al10d Firmware Version 9.1.0.212(c00e204r2p2)
   Huawei ≫ Princeton-al10d Version -
Huawei ≫ Princeton-al10i Firmware Version 9.0.1.150(c675e9r1p4)
   Huawei ≫ Princeton-al10i Version -
Huawei ≫ Princeton-tl10c Firmware Version 9.1.0.211(c01e203r2p2)
   Huawei ≫ Princeton-tl10c Version -
Huawei ≫ Tony-al00b Firmware Version 9.1.0.206(c00e200r2p3)
   Huawei ≫ Tony-al00b Version -
Huawei ≫ Tony-tl00b Firmware Version 9.1.0.206(c01e200r2p3)
   Huawei ≫ Tony-tl00b Version -
Huawei ≫ Vogue-al00a Firmware Version 9.1.0.162(c00e160r2p1)
   Huawei ≫ Vogue-al00a Version -
Huawei ≫ Vogue-al00a-preload Firmware Version 9.1.0.12(c00r1)
   Huawei ≫ Vogue-al00a-preload Version -
Huawei ≫ Vogue-al10c Firmware Version 9.1.0.162(c00e160r2p1)
   Huawei ≫ Vogue-al10c Version -
Huawei ≫ Vogue-al10c-preload Firmware Version 9.1.0.12(c00r1)
   Huawei ≫ Vogue-al10c-preload Version -
Huawei ≫ Vogue-tl00b Firmware Version 9.1.0.162(c01e160r2p1)
   Huawei ≫ Vogue-tl00b Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.05% 0.597
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-smartphone-en
Vendor Advisory