CVE-2019-5260: Input Validation
Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this vulnerability. Successful exploit may cause an infinite loop and the device to reboot.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-5260.
Which Huawei smartphones are affected by this vulnerability?
The Huawei smartphones HUAWEI Y9 2019 and Honor View 20 are affected by this vulnerability.
What is the severity level of CVE-2019-5260?
The severity level of CVE-2019-5260 is medium with a score of 6.5.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by sending specially crafted TD-SCDMA messages from a rogue base station to the affected devices.
Is there a fix available for this vulnerability?
Yes, Huawei has released a security advisory with information on how to mitigate this vulnerability. You can find more information at the following link: [Huawei Security Advisory](https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190911-01-mobile-en)