CVEvulnerability

CVE-2019-5224

5.5 MEDIUM Published 2019-11-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-125

Description

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21) have an out of bounds read vulnerability. The system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user to install a malicious application, successful exploit could cause out of bounds read and information disclosure.

Affected configurations

• huawei p30 firmware (< elle-al00b 9.1.0.193\(c00e190r1p21\))

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References