CVE Feed

    Dashboard / CVE / CVE-2019-5235

    CVE-2019-5235

    Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.

    Published:Dec 13, 2019
    Last Modified:Nov 21, 2024
    EPS:Dec 13, 2019
    EPSS Score:0.00247
    CVSS Score:5.3

    Affected Products

    Vendor
    Huawei
    Product
    Alp-al00b
    Vendor
    Huawei
    Product
    Alp-al00b Firmware
    Vendor
    Huawei
    Product
    Alp-tl00b
    Vendor
    Huawei
    Product
    Alp-tl00b Firmware
    Vendor
    Huawei
    Product
    Bla-al00b
    Vendor
    Huawei
    Product
    Bla-al00b Firmware
    Vendor
    Huawei
    Product
    Bla-tl00b
    Vendor
    Huawei
    Product
    Bla-tl00b Firmware
    Vendor
    Huawei
    Product
    Charlotte-al00a
    Vendor
    Huawei
    Product
    Charlotte-al00a Firmware
    Vendor
    Huawei
    Product
    Charlotte-tl00b
    Vendor
    Huawei
    Product
    Charlotte-tl00b Firmware
    Vendor
    Huawei
    Product
    Columbia-al10b
    Vendor
    Huawei
    Product
    Columbia-al10b Firmware
    Vendor
    Huawei
    Product
    Columbia-al10i
    Vendor
    Huawei
    Product
    Columbia-al10i Firmware
    Vendor
    Huawei
    Product
    Columbia-l29d
    Vendor
    Huawei
    Product
    Columbia-l29d Firmware
    Vendor
    Huawei
    Product
    Columbia-tl00d
    Vendor
    Huawei
    Product
    Columbia-tl00d Firmware
    Vendor
    Huawei
    Product
    Elle-al00b
    Vendor
    Huawei
    Product
    Elle-al00b Firmware
    Vendor
    Huawei
    Product
    Elle-tl00b
    Vendor
    Huawei
    Product
    Elle-tl00b Firmware
    Vendor
    Huawei
    Product
    Emily-al00a
    Vendor
    Huawei
    Product
    Emily-al00a Firmware
    Vendor
    Huawei
    Product
    Emily-tl00b
    Vendor
    Huawei
    Product
    Emily-tl00b Firmware
    Vendor
    Huawei
    Product
    Ever-al00b
    Vendor
    Huawei
    Product
    Ever-al00b Firmware
    Vendor
    Huawei
    Product
    Ever-l29b
    Vendor
    Huawei
    Product
    Ever-l29b Firmware
    Vendor
    Huawei
    Product
    Harry-al00c
    Vendor
    Huawei
    Product
    Harry-al00c Firmware
    Vendor
    Huawei
    Product
    Harry-al10b
    Vendor
    Huawei
    Product
    Harry-al10b Firmware
    Vendor
    Huawei
    Product
    Harry-tl00c
    Vendor
    Huawei
    Product
    Harry-tl00c Firmware
    Vendor
    Huawei
    Product
    Hima-al00b
    Vendor
    Huawei
    Product
    Hima-al00b Firmware
    Vendor
    Huawei
    Product
    Jackman-l21
    Vendor
    Huawei
    Product
    Jackman-l21 Firmware
    Vendor
    Huawei
    Product
    Jackman-l22
    Vendor
    Huawei
    Product
    Jackman-l22 Firmware
    Vendor
    Huawei
    Product
    Jackman-l23
    Vendor
    Huawei
    Product
    Jackman-l23 Firmware
    Vendor
    Huawei
    Product
    Johnson-al00ic
    Vendor
    Huawei
    Product
    Johnson-al00ic Firmware
    Vendor
    Huawei
    Product
    Johnson-al10c
    Vendor
    Huawei
    Product
    Johnson-al10c Firmware
    Vendor
    Huawei
    Product
    Johnson-l21c
    Vendor
    Huawei
    Product
    Johnson-l21c Firmware
    Vendor
    Huawei
    Product
    Johnson-l21d
    Vendor
    Huawei
    Product
    Johnson-l21d Firmware
    Vendor
    Huawei
    Product
    Johnson-l22c
    Vendor
    Huawei
    Product
    Johnson-l22c Firmware
    Vendor
    Huawei
    Product
    Johnson-l22d
    Vendor
    Huawei
    Product
    Johnson-l22d Firmware
    Vendor
    Huawei
    Product
    Johnson-l23c
    Vendor
    Huawei
    Product
    Johnson-l23c Firmware
    Vendor
    Huawei
    Product
    Johnson-l42ic
    Vendor
    Huawei
    Product
    Johnson-l42ic Firmware
    Vendor
    Huawei
    Product
    Johnson-l42ie
    Vendor
    Huawei
    Product
    Johnson-l42ie Firmware
    Vendor
    Huawei
    Product
    Johnson-l42if
    Vendor
    Huawei
    Product
    Johnson-l42if Firmware
    Vendor
    Huawei
    Product
    Johnson-tl00d
    Vendor
    Huawei
    Product
    Johnson-tl00d Firmware
    Vendor
    Huawei
    Product
    Johnson-tl00f
    Vendor
    Huawei
    Product
    Johnson-tl00f Firmware
    Vendor
    Huawei
    Product
    Laya-al00ep
    Vendor
    Huawei
    Product
    Laya-al00ep Firmware
    Vendor
    Huawei
    Product
    Neo-al00d
    Vendor
    Huawei
    Product
    Neo-al00d Firmware
    Vendor
    Huawei
    Product
    Potter-al00c
    Vendor
    Huawei
    Product
    Potter-al00c Firmware
    Vendor
    Huawei
    Product
    Potter-al10a
    Vendor
    Huawei
    Product
    Potter-al10a Firmware
    Vendor
    Huawei
    Product
    Princeton-al10b
    Vendor
    Huawei
    Product
    Princeton-al10b Firmware
    Vendor
    Huawei
    Product
    Princeton-al10d
    Vendor
    Huawei
    Product
    Princeton-al10d Firmware
    Vendor
    Huawei
    Product
    Princeton-al10i
    Vendor
    Huawei
    Product
    Princeton-al10i Firmware
    Vendor
    Huawei
    Product
    Princeton-tl10c
    Vendor
    Huawei
    Product
    Princeton-tl10c Firmware
    Vendor
    Huawei
    Product
    Tony-al00b
    Vendor
    Huawei
    Product
    Tony-al00b Firmware
    Vendor
    Huawei
    Product
    Tony-tl00b
    Vendor
    Huawei
    Product
    Tony-tl00b Firmware
    Vendor
    Huawei
    Product
    Vogue-al00a
    Vendor
    Huawei
    Product
    Vogue-al00a-preload
    Vendor
    Huawei
    Product
    Vogue-al00a-preload Firmware
    Vendor
    Huawei
    Product
    Vogue-al00a Firmware
    Vendor
    Huawei
    Product
    Vogue-al10c
    Vendor
    Huawei
    Product
    Vogue-al10c-preload
    Vendor
    Huawei
    Product
    Vogue-al10c-preload Firmware
    Vendor
    Huawei
    Product
    Vogue-al10c Firmware
    Vendor
    Huawei
    Product
    Vogue-tl00b
    Vendor
    Huawei
    Product
    Vogue-tl00b Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2019-19412 (CVSS 4.6) — Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring t…
    CVE-2019-5303 (CVSS 5.3) — There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially cra…
    CVE-2019-5302 (CVSS 5.3) — There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially cra…
    CVE-2019-2215 (CVSS 7.8) — A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user…
    CVE-2019-9506 (CVSS 8.1) — The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key len…
    CVE-2018-7910 (CVSS 6.8) — Some Huawei smartphones ALP-AL00B 8.0.0.118D(C00), ALP-TL00B 8.0.0.118D(C01), BLA-AL00B 8.0.0.118D(C00), BLA-L…
    CVE-2018-7911 (CVSS 4.6) — Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.…
    CVE-2018-7901 (CVSS 4.4) — RCS module in Huawei ALP-AL00B smart phones with software versions earlier than 8.0.0.129, BLA-AL00B smart pho…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High