CVE-2019-5266: Input Validation

Published Dec 23, 2019

Updated

Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled.

Affected Software

2 affected components

Huawei P30 Firmware=9.1.0.193\(c00e190r2p1\)

Huawei P30

Event History

Dec 23, 2019

CVE Published

via MITRE·05:49 PM

Data Sourced

via MITRE·05:49 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-5266?

CVE-2019-5266 is a vulnerability in the Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone that allows attackers to disable the function by sending crafted packets.

How severe is CVE-2019-5266?

CVE-2019-5266 has a severity rating of 7.5 (high).

How can CVE-2019-5266 be exploited?

CVE-2019-5266 can be exploited by sending crafted packets to the affected device.

Which software versions are affected by CVE-2019-5266?

The Huawei P30 firmware version 9.1.0.193(C00E190R2P1) is affected.

Is the HUAWEI P30 affected by CVE-2019-5266?

No, the HUAWEI P30 is not affected by CVE-2019-5266.

Is there a fix for CVE-2019-5266?

Please refer to the official Huawei security advisory at https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191218-02-share-en for information on patches or mitigations for CVE-2019-5266.