medium
5.3
CWE
20
Advisory Published
Updated

CVE-2019-5302: Input Validation

First published: Mon Apr 27 2020(Updated: )

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Credit: psirt@huawei.com

Affected SoftwareAffected VersionHow to fix
Huawei ALP-AL00B-RSC Firmware<9.1.0.333\(c00e333r2p1t8\)
Huawei ALP-AL00B-RSC Firmware
Huawei ALP-L09 firmware<9.1.0.300\(c432e4r1p9t8\)
Huawei ALP-L09
Huawei ALP-L29 firmware<9.1.0.315\(c636e5r1p13t8\)
Huawei alp-l29
Huawei BLA-L29C Firmware<9.1.0.321\(c636e4r1p14t8\)
Huawei BLA-L29
Huawei BLA-L29C Firmware<9.1.0.330\(c432e6r1p12t8\)
Huawei BLA-L29C Firmware<9.1.0.302\(c635e4r1p13t8\)
Huawei Berkeley-AL20 Firmware<9.1.0.333\(c00e333r2p1t8\)
Huawei Berkeley-AL20 Firmware
Huawei Berkeley-L09<9.1.0.350\(c10e3r1p14t8\)
Huawei Berkeley-L09 Firmware
Huawei Berkeley-L09<9.1.0.351\(c432e5r1p13t8\)
Huawei Berkeley-L09<9.1.0.350\(c636e4r1p13t8\)
Huawei Charlotte-L09C firmware<9.1.0.311\(c185e4r1p11t8\)
Huawei Charlotte-L09C
Huawei Charlotte-L09C firmware<9.1.0.345\(c432e8r1p11t8\)
Huawei Charlotte L29C<9.1.0.325\(c185e4r1p11t8\)
Huawei Charlotte L29C
Huawei Charlotte L29C<9.1.0.335\(c636e3r1p13t8\)
Huawei Charlotte L29C<9.1.0.345\(c432e8r1p11t8\)
Huawei Charlotte L29C<9.1.0.336\(c605e3r1p12t8\)
Huawei Columbia-AL10B<9.1.0.333\(c00e333r1p1t8\)
Huawei Columbia-AL10B Firmware
Huawei LON-L29D<9.1.0.350\(c461e3r1p11t8\)
Huawei Columbia-L29D Firmware
Huawei LON-L29D<9.1.0.350\(c185e3r1p12t8\)
Huawei LON-L29D<9.1.0.350\(c10e5r1p14t8\)
Huawei LON-L29D<9.1.0.351\(c432e5r1p13t8\)
Huawei Cornell-AL00A Firmware<9.1.0.333\(c00e333r1p1t8\)
Huawei Cornell-AL00A Firmware
Huawei Cornell-L29A<9.1.0.328\(c185e1r1p9t8\)
Huawei Cornell-L29A Firmware
Huawei Cornell-L29A<9.1.0.328\(c432e1r1p9t8\)
Huawei Cornell-L29A<9.1.0.330\(c461e1r1p9t8\)
Huawei Cornell-L29A<9.1.0.328\(c636e2r1p12t8\)
Huawei Emily-L09C firmware<9.1.0.336\(c605e4r1p12t8\)
Huawei Emily-L09C
Huawei Emily-L09C firmware<9.1.0.311\(c185e2r1p12t8\)
Huawei Emily-L09C firmware<9.1.0.345\(c432e10r1p12t8\)
Huawei Emily-L29C<9.1.0.311\(c605e2r1p12t8\)
Huawei Emily-l29c Firmware
Huawei Emily-L29C<9.1.0.311\(c636e7r1p13t8\)
Huawei Emily-L29C<9.1.0.311\(c432e7r1p11t8\)
Huawei EVER-L29B<9.1.0.311\(c185e3r3p1\)
Huawei EVER-L29B Firmware
Huawei EVER-L29B<9.1.0.310\(c636e3r2p1\)
Huawei EVER-L29B<9.1.0.310\(c432e3r1p12\)
Huawei Mate20 Firmware<9.1.0.131\(c00e131r3p1\)
HUAWEI Mate 20
Huawei Mate 20 Pro Firmware<9.1.0.310\(c185e10r2p1\)
Huawei Mate 20 Pro Firmware
Huawei Mate 20 RS Firmware<9.1.0.135\(c786e133r3p1\)
HUAWEI Mate 20 RS
Huawei Mate 20 X Firmware<9.1.0.135\(c00e133r2p1\)
Huawei Mate 20 X Firmware
Huawei P20 Firmware<9.1.0.333\(c00e333r1p1t8\)
HUAWEI P20
Huawei P20 Pro Firmware<9.1.0.333\(c00e333r1p1t8\)
HUAWEI P20 Pro
Huawei P30 Firmware<9.1.0.193
HUAWEI P30
Huawei P30 Pro Firmware<9.1.0.186\(c00e180r2p1\)
Huawei P30 Pro Firmware
Huawei Y9 2019 Firmware<9.1.0.220\(c605e3r1p1t8\)
Huawei Y9 2019 Firmware
Huawei Nova Lite 3 Firmware<9.1.0.305\(c635e8r2p2\)
Huawei Nova Lite 3 Firmware
Huawei Honor 10 Lite<9.1.0.283\(c605e8r2p2\)
Huawei Honor 10 Lite Firmware
Huawei Honor 8X Firmware<9.1.0.221\(c461e2r1p1t8\)
Huawei Honor 8X
HUAWEI Honor V20 firmware<9.1.0.238\(c432e1r3p1\)
Huawei Honor View 20 Firmware
Huawei Jackman-L22 firmware<9.1.0.247\(c636e2r4p1t8\)
Huawei Jackman-L22
Huawei Paris-L21MEB Firmware<9.1.0.331\(c432e1r1p2t8\)
Huawei Paris-l21b Firmware
Huawei Paris-L21MEB<9.1.0.331\(c185e4r1p3t8\)
Huawei Paris-L21MEB Firmware
Huawei PARIS-L29B<9.1.0.331\(c636e1r1p3t8\)
Huawei EVER-L29B
Huawei Sydney-AL00<9.1.0.212\(c00e62r1p7t8\)
Huawei Sydney-AL00 Firmware
Huawei Sydney-L21<9.1.0.215\(c432e1r1p1t8\)
Huawei SYDNEYM-L21 Firmware
Huawei Sydney-L21<9.1.0.213\(c185e1r1p1t8\)
Huawei Sydney-L21BR<9.1.0.213\(c185e1r1p2t8\)
Huawei Sydney-L21
Huawei Sydney-L22 Firmware<9.1.0.258\(c636e1r1p1t8\)
Huawei Sydney-L22BR
Huawei Sydney-L22BR<9.1.0.258\(c636e1r1p1t8\)
Huawei Sydney-L22BR Firmware
Huawei SydneyM-AL00 Firmware<9.1.0.228\(c00e78r1p7t8\)
Huawei SydneyM-AL00 Firmware
Huawei SYDNEYM-L01<9.1.0.215\(c782e2r1p1t8\)
Huawei SydneyM-L01 Firmware
Huawei SYDNEYM-L01<9.1.0.213\(c185e1r1p1t8\)
Huawei SYDNEYM-L01<9.1.0.270\(c432e3r1p1t8\)
Huawei Sydneym-L03<9.1.0.217\(c605e1r1p1t8\)
Huawei Sydney
Huawei SydneyM-L21<9.1.0.221\(c461e1r1p1t8\)
Huawei SYDNEYM-L21 Firmware
Huawei SydneyM-L21<9.1.0.215\(c432e4r1p1t8\)
Huawei SYDNEYM-L22<9.1.0.259\(c185e1r1p2t8\)
Huawei SYDNEYM-L22
Huawei SYDNEYM-L22<9.1.0.220\(c635e1r1p2t8\)
Huawei SYDNEYM-L22<9.1.0.216\(c569e1r1p1t8\)
Huawei Sydney-M-L23<9.1.0.226\(c605e2r1p1t8\)
Huawei Sydney-M-L23
Huawei Yale-l21a<9.1.0.154\(c432e2r3p2\)
Huawei Y6
Huawei Yale-l21a<9.1.0.154\(c461e2r2p1\)
Huawei Yale-l21a<9.1.0.154\(c636e2r2p1\)
Huawei Honor 20<9.1.0.152\(c00e150r5p1\)
Huawei Honor 20 Firmware
HUAWEI Honor Magic 2 firmware<10.0.0.187
HUAWEI Honor Magic 2 firmware
Huawei Honor View 20 Firmware<9.1.0.234\(c00e234r4p3\)
Huawei Honor View 20

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203