Vulnerability Description
P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A 9.1.0.193(C00E190R1P12) have a buffer overflow vulnerability on several , the system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user to install a malicious application, successful exploit could cause malicious code execution.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | P30 Firmware | < elle-al00b_9.1.0.193\(c00e190r1p21\) |
| Huawei | P30 | - |
| Huawei | Mate 20 Firmware | < hima-al00b_9.1.0.135\(c00e200r2p1\) |
| Huawei | Mate 20 | - |
| Huawei | P30 Pro Firmware | < vogue-al00a_9.1.0.193\(c00e190r1p12\) |
| Huawei | P30 Pro | - |
Related Weaknesses (CWE)
References
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-02-smartpVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190821-02-smartpVendor Advisory
FAQ
What is CVE-2019-5225?
CVE-2019-5225 is a vulnerability with a CVSS score of 7.8 (HIGH). P30, Mate 20, P30 Pro smartphones with software of versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), versions earlier than Hima-AL00B 9.1.0.135(C00E200R2P1), versions earlier than VOGUE-AL00A ...
How severe is CVE-2019-5225?
CVE-2019-5225 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-5225?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei P30 Firmware, Huawei P30, Huawei Mate 20 Firmware, Huawei Mate 20, Huawei P30 Pro Firmware.