PT-2019-17564 · Huawei · Huawei Mate 20

Publicado 2019-06-04 · Atualizado 2019-06-05 · CVE-2019-5296

Positive Technologies (AI Summary)

CVSS v3.1

3.9

Baixa

Vetor base

AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei Mate20 smartphones versions earlier than HMA-AL00C00B175

Description The issue is related to an out-of-bounds read vulnerability. An attacker with high permission can run specific commands on the smartphone, potentially causing an out-of-bounds read of the memory due to insufficient input verification. This could lead to system abnormalities.

Recommendations For versions earlier than HMA-AL00C00B175, update to a version HMA-AL00C00B175 or later to resolve the issue.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2019-5296

Produtos afetados

Huawei Mate 20

Referências · 3

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-phone-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-5296 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-5296 · Aviso do Fabricante