PT-2019-4384 · Huawei · Huawei P30

Published 2019-08-21 · Updated 2019-12-11 · CVE-2019-5224

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei P30 versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21)

Description The issue is related to an out of bounds read, where the system fails to properly validate certain length parameters transported by an application to the kernel. This could allow an attacker to trick a user into installing a malicious application, potentially leading to information disclosure through successful exploitation. The vulnerability is associated with a buffer read out of bounds in memory, which may enable an attacker to gain unauthorized access to protected information.

Recommendations For versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21), update to a version that includes the necessary security patches to mitigate the out of bounds read vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2020-00106

CVE-2019-5224

Affected Products

Huawei P30

References · 4

• https://huawei.com/en/psirt/security-advisories/huawei-sa-20190821-03-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5224 · Security Note
• https://osv.dev/vulnerability/CVE-2019-5224 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00106 · Security Note