Vulnerability Description
Nova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190(C00E190R6P2)and Versions earlier than 9.1.1.175(C00E170R3P2) have an improper validation of array index vulnerability. The system does not properly validate the input value before use it as an array index when processing certain image information. The attacker tricks the user into installing a malicious application, successful exploit could cause malicious code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Nova 5I Pro Firmware | < 9.1.1.190\(c00e190r6p2\) |
| Huawei | Nova 5I Pro | - |
| Huawei | Nova 5 Firmware | < 9.1.1.175\(c00e170r3p2\) |
| Huawei | Nova 5 | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191120-01-smartphVendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191120-01-smartphVendor Advisory
FAQ
What is CVE-2019-5210?
CVE-2019-5210 is a vulnerability with a CVSS score of 7.8 (HIGH). Nova 5i pro and Nova 5 smartphones with versions earlier than 9.1.1.190(C00E190R6P2)and Versions earlier than 9.1.1.175(C00E170R3P2) have an improper validation of array index vulnerability. The syste...
How severe is CVE-2019-5210?
CVE-2019-5210 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-5210?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Nova 5I Pro Firmware, Huawei Nova 5I Pro, Huawei Nova 5 Firmware, Huawei Nova 5.