CVE-2019-5235

Published: Dec 14, 2019Modified: Nov 21, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.

Affected (66)

50 products

Charlotte Al00a Firmware

Charlotte Tl00b Firmware

Columbia Al10b Firmware

Columbia Al10i Firmware

Columbia L29d Firmware

Columbia Tl00d Firmware

Johnson Al00ic Firmware

Johnson Al10c Firmware

Johnson L21c Firmware

Johnson L21d Firmware

Johnson L22c Firmware

Johnson L22d Firmware

Johnson L23c Firmware

Johnson L42ic Firmware

Johnson L42ie Firmware

Johnson L42if Firmware

Johnson Tl00d Firmware

Johnson Tl00f Firmware

Laya Al00ep Firmware

Neo Al00d Firmware

Potter Al00c Firmware

Potter Al10a Firmware

Princeton Al10b Firmware

Princeton Al10d Firmware

Princeton Al10i Firmware

Princeton Tl10c Firmware

Tony Al00b Firmware

Tony Tl00b Firmware

Vogue Al00a Firmware

Vogue Al00a Preload Firmware

Vogue Al10c Firmware

Vogue Al10c Preload Firmware

Vogue Tl00b Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Alp Al00b Firmware	Version 8.0.0.153(c00)

Running on/with	Platform Versions
Huawei Alp Al00b	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Alp Tl00b Firmware	Version 8.0.0.129(sp2c01)

Running on/with	Platform Versions
Huawei Alp Tl00b	All versions

Configuration C

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Bla Al00b Firmware	Version 8.0.0.129(sp2c786)
Huawei Bla Al00b Firmware	Version 8.0.0.153(c00)

Running on/with	Platform Versions
Huawei Bla Al00b	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Bla Tl00b Firmware	Version 8.0.0.129(sp2c01)

Running on/with	Platform Versions
Huawei Bla Tl00b	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Charlotte Al00a Firmware	Version 8.1.0.176(c00)

Running on/with	Platform Versions
Huawei Charlotte Al00a	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Charlotte Tl00b Firmware	Version 8.1.0.176(c01)

Running on/with	Platform Versions
Huawei Charlotte Tl00b	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Columbia Al10b Firmware	Version 8.1.0.163(c00)

Running on/with	Platform Versions
Huawei Columbia Al10b	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Columbia Al10i Firmware	Version 8.1.0.150(c675custc675d2)

Running on/with	Platform Versions
Huawei Columbia Al10i	All versions

Configuration I

4 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Columbia L29d Firmware	Version 8.1.0.146(c461)
Huawei Columbia L29d Firmware	Version 8.1.0.148(c185)
Huawei Columbia L29d Firmware	Version 8.1.0.151(c10)
Huawei Columbia L29d Firmware	Version 8.1.0.151(c432)

Running on/with	Platform Versions
Huawei Columbia L29d	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Columbia Tl00d Firmware	Version 8.1.0.186(c01gt)

Running on/with	Platform Versions
Huawei Columbia Tl00d	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Elle Al00b Firmware	Version 9.1.0.162(c00e160r2p1)

Running on/with	Platform Versions
Huawei Elle Al00b	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Elle Tl00b Firmware	Version 9.1.0.162(c01e160r2p1)

Running on/with	Platform Versions
Huawei Elle Tl00b	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Emily Al00a Firmware	Version 8.1.0.190(c00)

Running on/with	Platform Versions
Huawei Emily Al00a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Emily Tl00b Firmware	Version 8.1.0.175(c01)

Running on/with	Platform Versions
Huawei Emily Tl00b	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ever Al00b Firmware	Version 9.0.0.195(c00e195r2p1)

Running on/with	Platform Versions
Huawei Ever Al00b	All versions

Configuration P

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Ever L29b Firmware	Version 9.0.0.206(c185e3r3p1)
Huawei Ever L29b Firmware	Version 9.0.0.207(c636e3r2p1)
Huawei Ever L29b Firmware	Version 9.0.0.208(c432e3r1p12)

Running on/with	Platform Versions
Huawei Ever L29b	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Harry Al00c Firmware	Version 9.1.0.206(c00e205r3p1)

Running on/with	Platform Versions
Huawei Harry Al00c	All versions

Configuration R

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Harry Al10b Firmware	All versions
Huawei Harry Al10b Firmware	Version 9.1.0.206(c00e205r3p1)

Running on/with	Platform Versions
Huawei Harry Al10b	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Harry Tl00c Firmware	Version 9.0.1.162(c01e160r2p3)

Running on/with	Platform Versions
Huawei Harry Tl00c	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Hima Al00b Firmware	Version 9.0.0.200(c00e200r2p1)

Running on/with	Platform Versions
Huawei Hima Al00b	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Jackman L21 Firmware	Version 8.2.0.160(c185)

Running on/with	Platform Versions
Huawei Jackman L21	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Jackman L22 Firmware	Version 8.2.0.156(c636r2p2)

Running on/with	Platform Versions
Huawei Jackman L22	All versions

Configuration W

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Jackman L23 Firmware	Version 8.2.0.152(c45custc45d1)
Huawei Jackman L23 Firmware	Version 8.2.0.162(c605)

Running on/with	Platform Versions
Huawei Jackman L23	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson Al00ic Firmware	Version 8.2.0.161(c675custc675d1)

Running on/with	Platform Versions
Huawei Johnson Al00ic	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson Al10c Firmware	Version 8.2.0.165(c00r1p16)

Running on/with	Platform Versions
Huawei Johnson Al10c	All versions

Configuration Z

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson L21c Firmware	Version 8.2.0.130(c461r1p1)
Huawei Johnson L21c Firmware	Version 8.2.0.131(c10r2p2)
Huawei Johnson L21c Firmware	Version 8.2.0.136(c432custc432d1)

Running on/with	Platform Versions
Huawei Johnson L21c	All versions

Configuration A

3 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson L21d Firmware	Version 8.2.0.101(c10custc10d1)
Huawei Johnson L21d Firmware	Version 8.2.0.101(c432custc432d1)
Huawei Johnson L21d Firmware	Version 8.2.0.131(c55custc55d1)

Running on/with	Platform Versions
Huawei Johnson L21d	All versions

Configuration B

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson L22c Firmware	Version 8.2.0.105(c185r1p1)
Huawei Johnson L22c Firmware	Version 8.2.0.107(c636r2p1)

Running on/with	Platform Versions
Huawei Johnson L22c	All versions

Configuration C

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson L22d Firmware	Version 8.2.0.105(c185r2p1)
Huawei Johnson L22d Firmware	Version 8.2.0.107(c636r2p1)

Running on/with	Platform Versions
Huawei Johnson L22d	All versions

Configuration D

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson L23c Firmware	Version 8.2.0.130(c636custc636d2)
Huawei Johnson L23c Firmware	Version 8.2.0.133(c605custc605d1)

Running on/with	Platform Versions
Huawei Johnson L23c	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson L42ic Firmware	Version 8.2.0.155(c675r2p1)

Running on/with	Platform Versions
Huawei Johnson L42ic	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson L42ie Firmware	Version 8.2.0.155(c675r2p1)

Running on/with	Platform Versions
Huawei Johnson L42ie	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson L42if Firmware	Version 8.2.0.155(c675r2p1)

Running on/with	Platform Versions
Huawei Johnson L42if	All versions

Configuration H

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson Tl00d Firmware	Version 8.2.0.100(c541custc541d1)
Huawei Johnson Tl00d Firmware	Version 8.2.0.165(c01r1p16)

Running on/with	Platform Versions
Huawei Johnson Tl00d	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Johnson Tl00f Firmware	Version 8.2.0.100(c541custc541d1)

Running on/with	Platform Versions
Huawei Johnson Tl00f	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Laya Al00ep Firmware	Version 9.0.0.201(c786e200r2p1)

Running on/with	Platform Versions
Huawei Laya Al00ep	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Neo Al00d Firmware	Version 8.1.0.175(c786)

Running on/with	Platform Versions
Huawei Neo Al00d	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Potter Al00c Firmware	Version 9.1.0.208(c00e205r3p1)

Running on/with	Platform Versions
Huawei Potter Al00c	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Potter Al10a Firmware	Version 9.1.0.208(c00e205r3p1)

Running on/with	Platform Versions
Huawei Potter Al10a	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Princeton Al10b Firmware	Version 9.1.0.211(c00e203r2p2)

Running on/with	Platform Versions
Huawei Princeton Al10b	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Princeton Al10d Firmware	Version 9.1.0.212(c00e204r2p2)

Running on/with	Platform Versions
Huawei Princeton Al10d	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Princeton Al10i Firmware	Version 9.0.1.150(c675e9r1p4)

Running on/with	Platform Versions
Huawei Princeton Al10i	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Princeton Tl10c Firmware	Version 9.1.0.211(c01e203r2p2)

Running on/with	Platform Versions
Huawei Princeton Tl10c	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Tony Al00b Firmware	Version 9.1.0.206(c00e200r2p3)

Running on/with	Platform Versions
Huawei Tony Al00b	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Tony Tl00b Firmware	Version 9.1.0.206(c01e200r2p3)

Running on/with	Platform Versions
Huawei Tony Tl00b	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Vogue Al00a Firmware	Version 9.1.0.162(c00e160r2p1)

Running on/with	Platform Versions
Huawei Vogue Al00a	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Vogue Al00a Preload Firmware	Version 9.1.0.12(c00r1)

Running on/with	Platform Versions
Huawei Vogue Al00a Preload	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Vogue Al10c Firmware	Version 9.1.0.162(c00e160r2p1)

Running on/with	Platform Versions
Huawei Vogue Al10c	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Vogue Al10c Preload Firmware	Version 9.1.0.12(c00r1)

Running on/with	Platform Versions
Huawei Vogue Al10c Preload	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Vogue Tl00b Firmware	Version 9.1.0.162(c01e160r2p1)

Running on/with	Platform Versions
Huawei Vogue Tl00b	All versions

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

References (2)

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-smartphone-en

Source: psirt@huawei.com

Vendor Advisory

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-smartphone-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.