CVE-2019-5302 Details
Description
There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en | CVE | Vendor Advisory |
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| huawei alp-al00b firmware | < 9.1.0.333\(c00e333r2p1t8\) |
CPE
Remediation
| |
| huawei alp-al00b | All versions |
CPE
Remediation
| |
| huawei alp-l09 firmware | < 9.1.0.300\(c432e4r1p9t8\) |
CPE
Remediation
| |
| huawei alp-l09 | All versions |
CPE
Remediation
| |
| huawei alp-l29 firmware | < 9.1.0.315\(c636e5r1p13t8\) |
CPE
Remediation
| |
| huawei alp-l29 | All versions |
CPE
Remediation
| |
| huawei bla-l29c firmware | < 9.1.0.321\(c636e4r1p14t8\) < 9.1.0.330\(c432e6r1p12t8\) < 9.1.0.302\(c635e4r1p13t8\) |
CPE
Remediation
| |
| huawei bla-l29c | All versions |
CPE
Remediation
| |
| huawei berkeley-al20 firmware | < 9.1.0.333\(c00e333r2p1t8\) |
CPE
Remediation
| |
| huawei berkeley-al20 | All versions |
CPE
Remediation
| |
| huawei berkeley-l09 firmware | < 9.1.0.350\(c10e3r1p14t8\) < 9.1.0.351\(c432e5r1p13t8\) < 9.1.0.350\(c636e4r1p13t8\) |
CPE
Remediation
| |
| huawei berkeley-l09 | All versions |
CPE
Remediation
| |
| huawei charlotte-l09c firmware | < 9.1.0.311\(c185e4r1p11t8\) < 9.1.0.345\(c432e8r1p11t8\) |
CPE
Remediation
| |
| huawei charlotte-l09c | All versions |
CPE
Remediation
| |
| huawei charlotte-l29c firmware | < 9.1.0.325\(c185e4r1p11t8\) < 9.1.0.335\(c636e3r1p13t8\) < 9.1.0.345\(c432e8r1p11t8\) < 9.1.0.336\(c605e3r1p12t8\) |
CPE
Remediation
| |
| huawei charlotte-l29c | All versions |
CPE
Remediation
| |
| huawei columbia-al10b firmware | < 9.1.0.333\(c00e333r1p1t8\) |
CPE
Remediation
| |
| huawei columbia-al10b | All versions |
CPE
Remediation
| |
| huawei columbia-l29d firmware | < 9.1.0.350\(c461e3r1p11t8\) < 9.1.0.350\(c185e3r1p12t8\) < 9.1.0.350\(c10e5r1p14t8\) < 9.1.0.351\(c432e5r1p13t8\) |
CPE
Remediation
| |
| huawei columbia-l29d | All versions |
CPE
Remediation
| |
| huawei cornell-al00a firmware | < 9.1.0.333\(c00e333r1p1t8\) |
CPE
Remediation
| |
| huawei cornell-al00a | All versions |
CPE
Remediation
| |
| huawei cornell-l29a firmware | < 9.1.0.328\(c185e1r1p9t8\) < 9.1.0.328\(c432e1r1p9t8\) < 9.1.0.330\(c461e1r1p9t8\) < 9.1.0.328\(c636e2r1p12t8\) |
CPE
Remediation
| |
| huawei cornell-l29a | All versions |
CPE
Remediation
| |
| huawei emily-l09c firmware | < 9.1.0.336\(c605e4r1p12t8\) < 9.1.0.311\(c185e2r1p12t8\) < 9.1.0.345\(c432e10r1p12t8\) |
CPE
Remediation
| |
| huawei emily-l09c | All versions |
CPE
Remediation
| |
| huawei emily-l29c firmware | < 9.1.0.311\(c605e2r1p12t8\) < 9.1.0.311\(c636e7r1p13t8\) < 9.1.0.311\(c432e7r1p11t8\) |
CPE
Remediation
| |
| huawei emily-l29c | All versions |
CPE
Remediation
| |
| huawei ever-l29b firmware | < 9.1.0.311\(c185e3r3p1\) < 9.1.0.310\(c636e3r2p1\) < 9.1.0.310\(c432e3r1p12\) |
CPE
Remediation
| |
| huawei ever-l29b | All versions |
CPE
Remediation
| |
| huawei mate 20 firmware | < 9.1.0.131\(c00e131r3p1\) |
CPE
Remediation
| |
| huawei mate 20 | All versions |
CPE
Remediation
| |
| huawei mate 20 pro firmware | < 9.1.0.310\(c185e10r2p1\) |
CPE
Remediation
| |
| huawei mate 20 pro | All versions |
CPE
Remediation
| |
| huawei mate 20 rs firmware | < 9.1.0.135\(c786e133r3p1\) |
CPE
Remediation
| |
| huawei mate 20 rs | All versions |
CPE
Remediation
| |
| huawei mate 20 x firmware | < 9.1.0.135\(c00e133r2p1\) |
CPE
Remediation
| |
| huawei mate 20 x | All versions |
CPE
Remediation
| |
| huawei p20 firmware | < 9.1.0.333\(c00e333r1p1t8\) |
CPE
Remediation
| |
| huawei p20 | All versions |
CPE
Remediation
| |
| huawei p20 pro firmware | < 9.1.0.333\(c00e333r1p1t8\) |
CPE
Remediation
| |
| huawei p20 pro | All versions |
CPE
Remediation
| |
| huawei p30 firmware | < 9.1.0.193 |
CPE
Remediation
| |
| huawei p30 | All versions |
CPE
Remediation
| |
| huawei p30 pro firmware | < 9.1.0.186\(c00e180r2p1\) |
CPE
Remediation
| |
| huawei p30 pro | All versions |
CPE
Remediation
| |
| huawei y9 2019 firmware | < 9.1.0.220\(c605e3r1p1t8\) |
CPE
Remediation
| |
| huawei y9 2019 | All versions |
CPE
Remediation
| |
| huawei nova lite 3 firmware | < 9.1.0.305\(c635e8r2p2\) |
CPE
Remediation
| |
| huawei nova lite 3 | All versions |
CPE
Remediation
| |
| huawei honor 10 lite firmware | < 9.1.0.283\(c605e8r2p2\) |
CPE
Remediation
| |
| huawei honor 10 lite | All versions |
CPE
Remediation
| |
| huawei honor 8x firmware | < 9.1.0.221\(c461e2r1p1t8\) |
CPE
Remediation
| |
| huawei honor 8x | All versions |
CPE
Remediation
| |
| huawei honor view 20 firmware | < 9.1.0.238\(c432e1r3p1\) |
CPE
Remediation
| |
| huawei honor view 20 | All versions |
CPE
Remediation
| |
| huawei jackman-l22 firmware | < 9.1.0.247\(c636e2r4p1t8\) |
CPE
Remediation
| |
| huawei jackman-l22 | All versions |
CPE
Remediation
| |
| huawei paris-l21b firmware | < 9.1.0.331\(c432e1r1p2t8\) |
CPE
Remediation
| |
| huawei paris-l21b | All versions |
CPE
Remediation
| |
| huawei paris-l21meb firmware | < 9.1.0.331\(c185e4r1p3t8\) |
CPE
Remediation
| |
| huawei paris-l21meb | All versions |
CPE
Remediation
| |
| huawei paris-l29b firmware | < 9.1.0.331\(c636e1r1p3t8\) |
CPE
Remediation
| |
| huawei paris-l29b | All versions |
CPE
Remediation
| |
| huawei sydney-al00 firmware | < 9.1.0.212\(c00e62r1p7t8\) |
CPE
Remediation
| |
| huawei sydney-al00 | All versions |
CPE
Remediation
| |
| huawei sydney-l21 firmware | < 9.1.0.215\(c432e1r1p1t8\) < 9.1.0.213\(c185e1r1p1t8\) |
CPE
Remediation
| |
| huawei sydney-l21 | All versions |
CPE
Remediation
| |
| huawei sydney-l21br firmware | < 9.1.0.213\(c185e1r1p2t8\) |
CPE
Remediation
| |
| huawei sydney-l21br | All versions |
CPE
Remediation
| |
| huawei sydney-l22 firmware | < 9.1.0.258\(c636e1r1p1t8\) |
CPE
Remediation
| |
| huawei sydney-l22 | All versions |
CPE
Remediation
| |
| huawei sydney-l22br firmware | < 9.1.0.258\(c636e1r1p1t8\) |
CPE
Remediation
| |
| huawei sydney-l22br | All versions |
CPE
Remediation
| |
| huawei sydneym-al00 firmware | < 9.1.0.228\(c00e78r1p7t8\) |
CPE
Remediation
| |
| huawei sydneym-al00 | All versions |
CPE
Remediation
| |
| huawei sydneym-l01 firmware | < 9.1.0.215\(c782e2r1p1t8\) < 9.1.0.213\(c185e1r1p1t8\) < 9.1.0.270\(c432e3r1p1t8\) |
CPE
Remediation
| |
| huawei sydneym-l01 | All versions |
CPE
Remediation
| |
| huawei sydneym-l03 firmware | < 9.1.0.217\(c605e1r1p1t8\) |
CPE
Remediation
| |
| huawei sydneym-l03 | All versions |
CPE
Remediation
| |
| huawei sydneym-l21 firmware | < 9.1.0.221\(c461e1r1p1t8\) < 9.1.0.215\(c432e4r1p1t8\) |
CPE
Remediation
| |
| huawei sydneym-l21 | All versions |
CPE
Remediation
| |
| huawei sydneym-l22 firmware | < 9.1.0.259\(c185e1r1p2t8\) < 9.1.0.220\(c635e1r1p2t8\) < 9.1.0.216\(c569e1r1p1t8\) |
CPE
Remediation
| |
| huawei sydneym-l22 | All versions |
CPE
Remediation
| |
| huawei sydneym-l23 firmware | < 9.1.0.226\(c605e2r1p1t8\) |
CPE
Remediation
| |
| huawei sydneym-l23 | All versions |
CPE
Remediation
| |
| huawei yale-l21a firmware | < 9.1.0.154\(c432e2r3p2\) < 9.1.0.154\(c461e2r2p1\) < 9.1.0.154\(c636e2r2p1\) |
CPE
Remediation
| |
| huawei yale-l21a | All versions |
CPE
Remediation
| |
| huawei honor 20 firmware | < 9.1.0.152\(c00e150r5p1\) |
CPE
Remediation
| |
| huawei honor 20 | All versions |
CPE
Remediation
| |
| huawei honor magic2 firmware | < 10.0.0.187 |
CPE
Remediation
| |
| huawei honor magic2 | All versions |
CPE
Remediation
| |
| huawei honor v20 firmware | < 9.1.0.234\(c00e234r4p3\) |
CPE
Remediation
| |
| huawei honor v20 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| May 5, 2020 | Initial Analysis | [email protected] |