← Back

CVE-2019-5260

nvd nist
Published: Dec 13, 2019Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this vulnerability. Successful exploit may cause an infinite loop and the device to reboot.

Affected (6)

Huawei
2 products
Y9 2019 Firmware
View 20 Firmware
Configuration A
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
Y9 2019 Firmware
Version 8.2.0.160(c185r2p2)
Y9 2019 Firmware
Version 8.2.0.162(c605)
Y9 2019 Firmware
Version 8.2.0.163(c605)
Running on/withPlatform Versions
Huawei
Y9 2019
All versions
Configuration B
3 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
View 20 Firmware
Version 9.0.1.169(c636e1r4p1)
View 20 Firmware
Version 9.0.1.170(c185e2r3p1)
View 20 Firmware
Version 9.0.1.170(c432e1r3p1)
Running on/withPlatform Versions
Huawei
View 20
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.