CVE-2019-5235: Null Pointer Dereference
Published Dec 13, 2019
·Updated
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.
Affected Software
116 affected components
Huawei Alp-al00b Firmware=8.0.0.153\(c00\)
Huawei ALP-AL00B
Huawei Alp-tl00b Firmware=8.0.0.129\(sp2c01\)
Huawei ALP-TL00B
Huawei Bla-al00b Firmware=8.0.0.129\(sp2c786\)
Huawei Bla-al00b Firmware=8.0.0.153\(c00\)
Huawei BLA-AL00B
Huawei Bla-tl00b Firmware=8.0.0.129\(sp2c01\)
Huawei BLA-TL00B
Huawei Charlotte-al00a Firmware=8.1.0.176\(c00\)
Huawei Charlotte-AL00A
Huawei Charlotte-tl00b Firmware=8.1.0.176\(c01\)
Huawei Charlotte-tl00b
Huawei Columbia-al10b Firmware=8.1.0.163\(c00\)
Huawei Columbia-AL10B
Huawei Columbia-al10i Firmware=8.1.0.150\(c675custc675d2\)
Huawei Columbia-al10i
Huawei Columbia-l29d Firmware=8.1.0.146\(c461\)
Huawei Columbia-l29d Firmware=8.1.0.148\(c185\)
Huawei Columbia-l29d Firmware=8.1.0.151\(c10\)
Huawei Columbia-l29d Firmware=8.1.0.151\(c432\)
Huawei Columbia-L29D
Huawei Columbia-tl00d Firmware=8.1.0.186\(c01gt\)
Huawei Columbia-tl00d
Huawei Elle-al00b Firmware=9.1.0.162\(c00e160r2p1\)
Huawei ELLE-AL00B
Huawei Elle-tl00b Firmware=9.1.0.162\(c01e160r2p1\)
Huawei Elle-tl00b
Huawei Emily-al00a Firmware=8.1.0.190\(c00\)
Huawei Emily-AL00A
Huawei Emily-tl00b Firmware=8.1.0.175\(c01\)
Huawei Emily-TL00B
Huawei Ever-al00b Firmware=9.0.0.195\(c00e195r2p1\)
Huawei Ever-al00b
Huawei Ever-l29b Firmware=9.0.0.206\(c185e3r3p1\)
Huawei Ever-l29b Firmware=9.0.0.207\(c636e3r2p1\)
Huawei Ever-l29b Firmware=9.0.0.208\(c432e3r1p12\)
Huawei Ever-L29B
Huawei Harry-al00c Firmware=9.1.0.206\(c00e205r3p1\)
Huawei Harry-al00c
Huawei Harry-al10b Firmware
Huawei Harry-al10b Firmware=9.1.0.206\(c00e205r3p1\)
Huawei Harry-al10b
Huawei Harry-tl00c Firmware=9.0.1.162\(c01e160r2p3\)
Huawei Harry-tl00c
Huawei Hima-al00b Firmware=9.0.0.200\(c00e200r2p1\)
Huawei Hima-AL00B
Huawei Jackman-l21 Firmware=8.2.0.160\(c185\)
Huawei Jackman-l21
Huawei Jackman-l22 Firmware=8.2.0.156\(c636r2p2\)
Huawei Jackman-L22
Huawei Jackman-l23 Firmware=8.2.0.152\(c45custc45d1\)
Huawei Jackman-l23 Firmware=8.2.0.162\(c605\)
Huawei Jackman-l23
Huawei Johnson-al00ic Firmware=8.2.0.161\(c675custc675d1\)
Huawei Johnson-al00ic
Huawei Johnson-al10c Firmware=8.2.0.165\(c00r1p16\)
Huawei Johnson-al10c
Huawei Johnson-l21c Firmware=8.2.0.130\(c461r1p1\)
Huawei Johnson-l21c Firmware=8.2.0.131\(c10r2p2\)
Huawei Johnson-l21c Firmware=8.2.0.136\(c432custc432d1\)
Huawei Johnson-l21c
Huawei Johnson-l21d Firmware=8.2.0.101\(c10custc10d1\)
Huawei Johnson-l21d Firmware=8.2.0.101\(c432custc432d1\)
Huawei Johnson-l21d Firmware=8.2.0.131\(c55custc55d1\)
Huawei Johnson-l21d
Huawei Johnson-l22c Firmware=8.2.0.105\(c185r1p1\)
Huawei Johnson-l22c Firmware=8.2.0.107\(c636r2p1\)
Huawei Johnson-l22c
Huawei Johnson-l22d Firmware=8.2.0.105\(c185r2p1\)
Huawei Johnson-l22d Firmware=8.2.0.107\(c636r2p1\)
Huawei Johnson-l22d
Huawei Johnson-l23c Firmware=8.2.0.130\(c636custc636d2\)
Huawei Johnson-l23c Firmware=8.2.0.133\(c605custc605d1\)
Huawei Johnson-l23c
Huawei Johnson-l42ic Firmware=8.2.0.155\(c675r2p1\)
Huawei Johnson-l42ic
Huawei Johnson-l42ie Firmware=8.2.0.155\(c675r2p1\)
Huawei Johnson-l42ie
Huawei Johnson-l42if Firmware=8.2.0.155\(c675r2p1\)
Huawei Johnson-l42if
Huawei Johnson-tl00d Firmware=8.2.0.100\(c541custc541d1\)
Huawei Johnson-tl00d Firmware=8.2.0.165\(c01r1p16\)
Huawei Johnson-tl00d
Huawei Johnson-tl00f Firmware=8.2.0.100\(c541custc541d1\)
Huawei Johnson-tl00f
Huawei Laya-al00ep Firmware=9.0.0.201\(c786e200r2p1\)
Huawei Laya-AL00EP
Huawei Neo-al00d Firmware=8.1.0.175\(c786\)
Huawei NEO-AL00D
Huawei Potter-al00c Firmware=9.1.0.208\(c00e205r3p1\)
Huawei Potter-al00c
Huawei Potter-al10a Firmware=9.1.0.208\(c00e205r3p1\)
Huawei Potter-al10a
Huawei Princeton-al10b Firmware=9.1.0.211\(c00e203r2p2\)
Huawei Princeton-AL10B
Huawei Princeton-al10d Firmware=9.1.0.212\(c00e204r2p2\)
Huawei Princeton-al10d
Huawei Princeton-al10i Firmware=9.0.1.150\(c675e9r1p4\)
Huawei Princeton-al10i
Huawei Princeton-tl10c Firmware=9.1.0.211\(c01e203r2p2\)
Huawei Princeton-tl10c
Huawei Tony-al00b Firmware=9.1.0.206\(c00e200r2p3\)
Huawei Tony-AL00B
Huawei Tony-tl00b Firmware=9.1.0.206\(c01e200r2p3\)
Huawei Tony-TL00B
Huawei Vogue-al00a Firmware=9.1.0.162\(c00e160r2p1\)
Huawei Vogue-al00a
Huawei Vogue-al00a-preload Firmware=9.1.0.12\(c00r1\)
Huawei Vogue-al00a-preload
Huawei Vogue-al10c Firmware=9.1.0.162\(c00e160r2p1\)
Huawei Vogue-al10c
Huawei Vogue-al10c-preload Firmware=9.1.0.12\(c00r1\)
Huawei Vogue-al10c-preload
Huawei Vogue-tl00b Firmware=9.1.0.162\(c01e160r2p1\)
Huawei Vogue-tl00b
Event History
Dec 13, 2019
CVE Published
via MITRE·11:09 PM
Data Sourced
via MITRE·11:09 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-5235?
CVE-2019-5235 is a high-severity vulnerability that can lead to abnormal behavior in affected Huawei smartphones.
2
What devices are affected by CVE-2019-5235?
CVE-2019-5235 affects specific Huawei smartphones running firmware versions such as 8.0.0.153 and 8.0.0.129.
3
How do I fix CVE-2019-5235?
To fix CVE-2019-5235, update your Huawei smartphone to the latest firmware version provided by Huawei.
4
What is a null pointer dereference vulnerability in CVE-2019-5235?
A null pointer dereference vulnerability like CVE-2019-5235 occurs when an application attempts to access an object or resource that has not been initialized, which may cause crashes or unintended behavior.
5
What are the potential impacts of exploiting CVE-2019-5235?
Exploiting CVE-2019-5235 may result in the affected smartphone becoming unresponsive or experiencing abnormal functionality.