CVE-2019-5235 - Vulnerability Details

Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00247.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

n/a

Harry-AL00C, Harry-AL00C-PRELOAD, Harry-AL10B, Harry-LGRP1-CHN, Harry-TL00C, Jackman-AL00D, Jackman-L03, Jackman-L21, Jackman-L22, Jackman-L23, Johnson-AL00C, Johnson-AL00IC, Johnson-AL10C, Johnson-L21C, Johnson-L21D, Johnson-L22C, Johnson-L22D, Johnson-L23C, Johnson-L42IC, Johnson-L42IE, Johnson-L42IF, Johnson-TL00D, Johnson-TL00F, Potter-AL00C, Potter-AL10A, VOGUE-AL00A, VOGUE-AL00A-PRELOAD, VOGUE-AL10C, VOGUE-AL10C-PRELOAD, VOGUE-LGRP1-CHN, VOGUE-LGRP2-OVS, VOGUE-TL00B

affected

Version	Status	Constraints
`Version`	affected	—
`9.1.0.206(C00E205R3P1)`	affected	—
`9.0.1.5(C735R1)`	affected	—
`9.1.0.1(C00R3)`	affected	—
`9.1.0.206`	affected	—
`9.0.1.162(C01E160R2P3)`	affected	—
`8.2.0.170(C861)`	affected	—
`8.2.0.188(C00R2P1)`	affected	—
`8.2.0.163(C605)`	affected	—
`8.2.0.160(C185)`	affected	—
`8.2.0.156(C636R2P2)`	affected	—
`8.2.0.152(C45CUSTC45D1)`	affected	—
`8.2.0.162(C605)`	affected	—
`8.2.0.175(C00R2P4)`	affected	—
`8.2.0.190(C788R1P16)`	affected	—
`8.2.0.161(C675CUSTC675D1)`	affected	—
`8.2.0.165(C00R1P16)`	affected	—
`8.2.0.130(C461R1P1)`	affected	—
`8.2.0.130(C652CUSTC652D1)`	affected	—
`8.2.0.131(C10R2P2)`	affected	—
`8.2.0.136(C432CUSTC432D1)`	affected	—
`8.2.0.101(C10CUSTC10D1)`	affected	—
`8.2.0.101(C432CUSTC432D1)`	affected	—
`8.2.0.131(C55CUSTC55D1)`	affected	—
`8.2.0.105(C185R1P1)`	affected	—
`8.2.0.107(C636R2P1)`	affected	—
`8.2.0.103(C652CUSTC652D1)`	affected	—
`8.2.0.105(C185R2P1)`	affected	—
`8.2.0.130(C636CUSTC636D2)`	affected	—
`8.2.0.133(C605CUSTC605D1)`	affected	—
`8.2.0.155(C675R2P1)`	affected	—
`8.2.0.110(C652CUSTC652D1)`	affected	—
`8.2.0.100(C541CUSTC541D1)`	affected	—
`8.2.0.165(C01R1P16)`	affected	—
`9.1.0.208(C00E205R3P1)`	affected	—
`9.1.0.162(C00E160R2P1)`	affected	—
`9.1.0.12(C00R1)`	affected	—
`9.1.0.4(C735R1)`	affected	—
`9.1.0.162`	affected	—
`9.1.0.161`	affected	—
`9.1.0.162(C01E160R2P1)`	affected	—

Configuration 1 [-]

AND

cpe:2.3:o:huawei:alp-al00b_firmware:8.0.0.153\(c00\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:alp-al00b:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:huawei:alp-tl00b_firmware:8.0.0.129\(sp2c01\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:alp-tl00b:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

OR	cpe:2.3:o:huawei:bla-al00b_firmware:8.0.0.129\(sp2c786\):::::::*
	cpe:2.3:o:huawei:bla-al00b_firmware:8.0.0.153\(c00\):::::::*

cpe:2.3:h:huawei:bla-al00b:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:huawei:bla-tl00b_firmware:8.0.0.129\(sp2c01\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:bla-tl00b:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:huawei:charlotte-al00a_firmware:8.1.0.176\(c00\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:charlotte-al00a:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:huawei:charlotte-tl00b_firmware:8.1.0.176\(c01\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:charlotte-tl00b:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:huawei:columbia-al10b_firmware:8.1.0.163\(c00\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:columbia-al10b:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:huawei:columbia-al10i_firmware:8.1.0.150\(c675custc675d2\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:columbia-al10i:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

OR	cpe:2.3:o:huawei:columbia-l29d_firmware:8.1.0.146\(c461\):::::::*
	cpe:2.3:o:huawei:columbia-l29d_firmware:8.1.0.148\(c185\):::::::*
	cpe:2.3:o:huawei:columbia-l29d_firmware:8.1.0.151\(c10\):::::::*
	cpe:2.3:o:huawei:columbia-l29d_firmware:8.1.0.151\(c432\):::::::*

cpe:2.3:h:huawei:columbia-l29d:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:huawei:columbia-tl00d_firmware:8.1.0.186\(c01gt\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:columbia-tl00d:-:*:*:*:*:*:*:*

Configuration 11 [-]

AND

cpe:2.3:o:huawei:elle-al00b_firmware:9.1.0.162\(c00e160r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:elle-al00b:-:*:*:*:*:*:*:*

Configuration 12 [-]

AND

cpe:2.3:o:huawei:elle-tl00b_firmware:9.1.0.162\(c01e160r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:elle-tl00b:-:*:*:*:*:*:*:*

Configuration 13 [-]

AND

cpe:2.3:o:huawei:emily-al00a_firmware:8.1.0.190\(c00\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:emily-al00a:-:*:*:*:*:*:*:*

Configuration 14 [-]

AND

cpe:2.3:o:huawei:emily-tl00b_firmware:8.1.0.175\(c01\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:emily-tl00b:-:*:*:*:*:*:*:*

Configuration 15 [-]

AND

cpe:2.3:o:huawei:ever-al00b_firmware:9.0.0.195\(c00e195r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:ever-al00b:-:*:*:*:*:*:*:*

Configuration 16 [-]

AND

OR	cpe:2.3:o:huawei:ever-l29b_firmware:9.0.0.206\(c185e3r3p1\):::::::*
	cpe:2.3:o:huawei:ever-l29b_firmware:9.0.0.207\(c636e3r2p1\):::::::*
	cpe:2.3:o:huawei:ever-l29b_firmware:9.0.0.208\(c432e3r1p12\):::::::*

cpe:2.3:h:huawei:ever-l29b:-:*:*:*:*:*:*:*

Configuration 17 [-]

AND

cpe:2.3:o:huawei:harry-al00c_firmware:9.1.0.206\(c00e205r3p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:harry-al00c:-:*:*:*:*:*:*:*

Configuration 18 [-]

AND

OR	cpe:2.3:o:huawei:harry-al10b_firmware:-:::::::*
	cpe:2.3:o:huawei:harry-al10b_firmware:9.1.0.206\(c00e205r3p1\):::::::*

cpe:2.3:h:huawei:harry-al10b:-:*:*:*:*:*:*:*

Configuration 19 [-]

AND

cpe:2.3:o:huawei:harry-tl00c_firmware:9.0.1.162\(c01e160r2p3\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:harry-tl00c:-:*:*:*:*:*:*:*

Configuration 20 [-]

AND

cpe:2.3:o:huawei:hima-al00b_firmware:9.0.0.200\(c00e200r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:hima-al00b:-:*:*:*:*:*:*:*

Configuration 21 [-]

AND

cpe:2.3:o:huawei:jackman-l21_firmware:8.2.0.160\(c185\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:jackman-l21:-:*:*:*:*:*:*:*

Configuration 22 [-]

AND

cpe:2.3:o:huawei:jackman-l22_firmware:8.2.0.156\(c636r2p2\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:jackman-l22:-:*:*:*:*:*:*:*

Configuration 23 [-]

AND

OR	cpe:2.3:o:huawei:jackman-l23_firmware:8.2.0.152\(c45custc45d1\):::::::*
	cpe:2.3:o:huawei:jackman-l23_firmware:8.2.0.162\(c605\):::::::*

cpe:2.3:h:huawei:jackman-l23:-:*:*:*:*:*:*:*

Configuration 24 [-]

AND

cpe:2.3:o:huawei:johnson-al00ic_firmware:8.2.0.161\(c675custc675d1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:johnson-al00ic:-:*:*:*:*:*:*:*

Configuration 25 [-]

AND

cpe:2.3:o:huawei:johnson-al10c_firmware:8.2.0.165\(c00r1p16\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:johnson-al10c:-:*:*:*:*:*:*:*

Configuration 26 [-]

AND

OR	cpe:2.3:o:huawei:johnson-l21c_firmware:8.2.0.130\(c461r1p1\):::::::*
	cpe:2.3:o:huawei:johnson-l21c_firmware:8.2.0.131\(c10r2p2\):::::::*
	cpe:2.3:o:huawei:johnson-l21c_firmware:8.2.0.136\(c432custc432d1\):::::::*

cpe:2.3:h:huawei:johnson-l21c:-:*:*:*:*:*:*:*

Configuration 27 [-]

AND

OR	cpe:2.3:o:huawei:johnson-l21d_firmware:8.2.0.101\(c10custc10d1\):::::::*
	cpe:2.3:o:huawei:johnson-l21d_firmware:8.2.0.101\(c432custc432d1\):::::::*
	cpe:2.3:o:huawei:johnson-l21d_firmware:8.2.0.131\(c55custc55d1\):::::::*

cpe:2.3:h:huawei:johnson-l21d:-:*:*:*:*:*:*:*

Configuration 28 [-]

AND

OR	cpe:2.3:o:huawei:johnson-l22c_firmware:8.2.0.105\(c185r1p1\):::::::*
	cpe:2.3:o:huawei:johnson-l22c_firmware:8.2.0.107\(c636r2p1\):::::::*

cpe:2.3:h:huawei:johnson-l22c:-:*:*:*:*:*:*:*

Configuration 29 [-]

AND

OR	cpe:2.3:o:huawei:johnson-l22d_firmware:8.2.0.105\(c185r2p1\):::::::*
	cpe:2.3:o:huawei:johnson-l22d_firmware:8.2.0.107\(c636r2p1\):::::::*

cpe:2.3:h:huawei:johnson-l22d:-:*:*:*:*:*:*:*

Configuration 30 [-]

AND

OR	cpe:2.3:o:huawei:johnson-l23c_firmware:8.2.0.130\(c636custc636d2\):::::::*
	cpe:2.3:o:huawei:johnson-l23c_firmware:8.2.0.133\(c605custc605d1\):::::::*

cpe:2.3:h:huawei:johnson-l23c:-:*:*:*:*:*:*:*

Configuration 31 [-]

AND

cpe:2.3:o:huawei:johnson-l42ic_firmware:8.2.0.155\(c675r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:johnson-l42ic:-:*:*:*:*:*:*:*

Configuration 32 [-]

AND

cpe:2.3:o:huawei:johnson-l42ie_firmware:8.2.0.155\(c675r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:johnson-l42ie:-:*:*:*:*:*:*:*

Configuration 33 [-]

AND

cpe:2.3:o:huawei:johnson-l42if_firmware:8.2.0.155\(c675r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:johnson-l42if:-:*:*:*:*:*:*:*

Configuration 34 [-]

AND

OR	cpe:2.3:o:huawei:johnson-tl00d_firmware:8.2.0.100\(c541custc541d1\):::::::*
	cpe:2.3:o:huawei:johnson-tl00d_firmware:8.2.0.165\(c01r1p16\):::::::*

cpe:2.3:h:huawei:johnson-tl00d:-:*:*:*:*:*:*:*

Configuration 35 [-]

AND

cpe:2.3:o:huawei:johnson-tl00f_firmware:8.2.0.100\(c541custc541d1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:johnson-tl00f:-:*:*:*:*:*:*:*

Configuration 36 [-]

AND

cpe:2.3:o:huawei:laya-al00ep_firmware:9.0.0.201\(c786e200r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:laya-al00ep:-:*:*:*:*:*:*:*

Configuration 37 [-]

AND

cpe:2.3:o:huawei:neo-al00d_firmware:8.1.0.175\(c786\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:neo-al00d:-:*:*:*:*:*:*:*

Configuration 38 [-]

AND

cpe:2.3:o:huawei:potter-al00c_firmware:9.1.0.208\(c00e205r3p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:potter-al00c:-:*:*:*:*:*:*:*

Configuration 39 [-]

AND

cpe:2.3:o:huawei:potter-al10a_firmware:9.1.0.208\(c00e205r3p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:potter-al10a:-:*:*:*:*:*:*:*

Configuration 40 [-]

AND

cpe:2.3:o:huawei:princeton-al10b_firmware:9.1.0.211\(c00e203r2p2\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:princeton-al10b:-:*:*:*:*:*:*:*

Configuration 41 [-]

AND

cpe:2.3:o:huawei:princeton-al10d_firmware:9.1.0.212\(c00e204r2p2\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:princeton-al10d:-:*:*:*:*:*:*:*

Configuration 42 [-]

AND

cpe:2.3:o:huawei:princeton-al10i_firmware:9.0.1.150\(c675e9r1p4\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:princeton-al10i:-:*:*:*:*:*:*:*

Configuration 43 [-]

AND

cpe:2.3:o:huawei:princeton-tl10c_firmware:9.1.0.211\(c01e203r2p2\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:princeton-tl10c:-:*:*:*:*:*:*:*

Configuration 44 [-]

AND

cpe:2.3:o:huawei:tony-al00b_firmware:9.1.0.206\(c00e200r2p3\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:tony-al00b:-:*:*:*:*:*:*:*

Configuration 45 [-]

AND

cpe:2.3:o:huawei:tony-tl00b_firmware:9.1.0.206\(c01e200r2p3\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:tony-tl00b:-:*:*:*:*:*:*:*

Configuration 46 [-]

AND

cpe:2.3:o:huawei:vogue-al00a_firmware:9.1.0.162\(c00e160r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:vogue-al00a:-:*:*:*:*:*:*:*

Configuration 47 [-]

AND

cpe:2.3:o:huawei:vogue-al00a-preload_firmware:9.1.0.12\(c00r1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:vogue-al00a-preload:-:*:*:*:*:*:*:*

Configuration 48 [-]

AND

cpe:2.3:o:huawei:vogue-al10c_firmware:9.1.0.162\(c00e160r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:vogue-al10c:-:*:*:*:*:*:*:*

Configuration 49 [-]

AND

cpe:2.3:o:huawei:vogue-al10c-preload_firmware:9.1.0.12\(c00r1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:vogue-al10c-preload:-:*:*:*:*:*:*:*

Configuration 50 [-]

AND

cpe:2.3:o:huawei:vogue-tl00b_firmware:9.1.0.162\(c01e160r2p1\):*:*:*:*:*:*:*

cpe:2.3:h:huawei:vogue-tl00b:-:*:*:*:*:*:*:*

No data.

Project Subscriptions

Vendors	Products
Huawei Subscribe	Alp-al00b Subscribe Alp-al00b Firmware Subscribe Alp-tl00b Subscribe Alp-tl00b Firmware Subscribe Bla-al00b Subscribe Bla-al00b Firmware Subscribe Bla-tl00b Subscribe Bla-tl00b Firmware Subscribe Charlotte-al00a Subscribe Charlotte-al00a Firmware Subscribe Charlotte-tl00b Subscribe Charlotte-tl00b Firmware Subscribe Columbia-al10b Subscribe Columbia-al10b Firmware Subscribe Columbia-al10i Subscribe Columbia-al10i Firmware Subscribe Columbia-l29d Subscribe Columbia-l29d Firmware Subscribe Columbia-tl00d Subscribe Columbia-tl00d Firmware Subscribe Elle-al00b Subscribe Elle-al00b Firmware Subscribe Elle-tl00b Subscribe Elle-tl00b Firmware Subscribe Emily-al00a Subscribe Emily-al00a Firmware Subscribe Emily-tl00b Subscribe Emily-tl00b Firmware Subscribe Ever-al00b Subscribe Ever-al00b Firmware Subscribe Ever-l29b Subscribe Ever-l29b Firmware Subscribe Harry-al00c Subscribe Harry-al00c Firmware Subscribe Harry-al10b Subscribe Harry-al10b Firmware Subscribe Harry-tl00c Subscribe Harry-tl00c Firmware Subscribe Hima-al00b Subscribe Hima-al00b Firmware Subscribe Jackman-l21 Subscribe Jackman-l21 Firmware Subscribe Jackman-l22 Subscribe Jackman-l22 Firmware Subscribe Jackman-l23 Subscribe Jackman-l23 Firmware Subscribe Johnson-al00ic Subscribe Johnson-al00ic Firmware Subscribe Johnson-al10c Subscribe Johnson-al10c Firmware Subscribe Johnson-l21c Subscribe Johnson-l21c Firmware Subscribe Johnson-l21d Subscribe Johnson-l21d Firmware Subscribe Johnson-l22c Subscribe Johnson-l22c Firmware Subscribe Johnson-l22d Subscribe Johnson-l22d Firmware Subscribe Johnson-l23c Subscribe Johnson-l23c Firmware Subscribe Johnson-l42ic Subscribe Johnson-l42ic Firmware Subscribe Johnson-l42ie Subscribe Johnson-l42ie Firmware Subscribe Johnson-l42if Subscribe Johnson-l42if Firmware Subscribe Johnson-tl00d Subscribe Johnson-tl00d Firmware Subscribe Johnson-tl00f Subscribe Johnson-tl00f Firmware Subscribe Laya-al00ep Subscribe Laya-al00ep Firmware Subscribe Neo-al00d Subscribe Neo-al00d Firmware Subscribe Potter-al00c Subscribe Potter-al00c Firmware Subscribe Potter-al10a Subscribe Potter-al10a Firmware Subscribe Princeton-al10b Subscribe Princeton-al10b Firmware Subscribe Princeton-al10d Subscribe Princeton-al10d Firmware Subscribe Princeton-al10i Subscribe Princeton-al10i Firmware Subscribe Princeton-tl10c Subscribe Princeton-tl10c Firmware Subscribe Tony-al00b Subscribe Tony-al00b Firmware Subscribe Tony-tl00b Subscribe Tony-tl00b Firmware Subscribe Vogue-al00a Subscribe Vogue-al00a-preload Subscribe Vogue-al00a-preload Firmware Subscribe Vogue-al00a Firmware Subscribe Vogue-al10c Subscribe Vogue-al10c-preload Subscribe Vogue-al10c-preload Firmware Subscribe Vogue-al10c Firmware Subscribe Vogue-tl00b Subscribe Vogue-tl00b Firmware Subscribe

Advisories

Source	ID	Title
EUVD	EUVD-2019-14840	Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-01-smartphone-en

History

No history.

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: huawei

Published: 2019-12-13T23:09:32

Updated: 2024-08-04T19:47:56.874Z

Reserved: 2019-01-04T00:00:00

Link: CVE-2019-5235

Vulnrichment

No data.

NVD

Status : Modified

Published: 2019-12-14T00:15:10.977

Modified: 2024-11-21T04:44:34.617

Link: CVE-2019-5235

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-476

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Project Subscriptions

Projects

JSON object

JSON object

JSON object

JSON object

JSON object