CVEvulnerability

CVE-2019-5225

7.8 HIGH Published 2019-11-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
CWE-120

Description

P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P12) have a buffer overflow vulnerability on several , the system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user to install a malicious application, successful exploit could cause malicious code execution.

Affected configurations

• huawei p30 firmware (< elle-al00b 9.1.0.193\(c00e190r1p21\)) • huawei mate 20 firmware (< hima-al00b 9.1.0.135\(c00e200r2p1\)) • huawei p30 pro firmware (< vogue-al00a 9.1.0.193\(c00e190r1p12\))

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References