PT-2019-17564 · Huawei · Huawei Mate 20

Published 2019-06-04 · Updated 2019-06-05 · CVE-2019-5296

Positive Technologies (AI Summary)

CVSS v3.1

3.9

Low

Base vector

AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei Mate20 smartphones versions earlier than HMA-AL00C00B175

Description The issue is related to an out-of-bounds read vulnerability. An attacker with high permission can run specific commands on the smartphone, potentially causing an out-of-bounds read of the memory due to insufficient input verification. This could lead to system abnormalities.

Recommendations For versions earlier than HMA-AL00C00B175, update to a version HMA-AL00C00B175 or later to resolve the issue.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2019-5296

Affected Products

Huawei Mate 20

References · 3

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-phone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5296 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5296 · Vendor Advisory