3.9

CVE-2019-5296

Mate20 Huawei smartphones versions earlier than HMA-AL00C00B175 have an out-of-bounds read vulnerability. An attacker with a high permission runs some specific commands on the smartphone. Due to insufficient input verification, successful exploit may cause out-of-bounds read of the memory and the system abnormal.

Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Mate20 Firmware Version < hma-al00c00b175
   Huawei ≫ Mate20 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.042
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 3.9 0.3 3.6
CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 1.7 3.1 2.9
AV:L/AC:L/Au:S/C:N/I:N/A:P
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.