CWE
20
Advisory Published
Updated

CVE-2019-5302: Input Validation

First published: Mon Apr 27 2020(Updated: )

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Credit: psirt@huawei.com

Affected SoftwareAffected VersionHow to fix
Huawei Alp-al00b Firmware<9.1.0.333\(c00e333r2p1t8\)
Huawei ALP-AL00B
Huawei Alp-l09 Firmware<9.1.0.300\(c432e4r1p9t8\)
Huawei ALP-L09
Huawei Alp-l29 Firmware<9.1.0.315\(c636e5r1p13t8\)
Huawei Alp-l29
Huawei Bla-l29c Firmware<9.1.0.321\(c636e4r1p14t8\)
Apple tvOS
Huawei Bla-l29c Firmware<9.1.0.330\(c432e6r1p12t8\)
Huawei Bla-l29c Firmware<9.1.0.302\(c635e4r1p13t8\)
Huawei Berkeley-al20 Firmware<9.1.0.333\(c00e333r2p1t8\)
Huawei Berkeley-AL20
Huawei Berkeley-l09 Firmware<9.1.0.350\(c10e3r1p14t8\)
Apple tvOS
Huawei Berkeley-l09 Firmware<9.1.0.351\(c432e5r1p13t8\)
Huawei Berkeley-l09 Firmware<9.1.0.350\(c636e4r1p13t8\)
Huawei Charlotte-l09c Firmware<9.1.0.311\(c185e4r1p11t8\)
Huawei Charlotte-l09c
Huawei Charlotte-l09c Firmware<9.1.0.345\(c432e8r1p11t8\)
Huawei Charlotte-l29c Firmware<9.1.0.325\(c185e4r1p11t8\)
Huawei Charlotte-l29c
Huawei Charlotte-l29c Firmware<9.1.0.335\(c636e3r1p13t8\)
Huawei Charlotte-l29c Firmware<9.1.0.345\(c432e8r1p11t8\)
Huawei Charlotte-l29c Firmware<9.1.0.336\(c605e3r1p12t8\)
Huawei Columbia-al10b Firmware<9.1.0.333\(c00e333r1p1t8\)
Huawei Columbia-al10b
Huawei Columbia-l29d Firmware<9.1.0.350\(c461e3r1p11t8\)
Huawei Columbia-l29d
Huawei Columbia-l29d Firmware<9.1.0.350\(c185e3r1p12t8\)
Huawei Columbia-l29d Firmware<9.1.0.350\(c10e5r1p14t8\)
Huawei Columbia-l29d Firmware<9.1.0.351\(c432e5r1p13t8\)
Huawei Cornell-al00a Firmware<9.1.0.333\(c00e333r1p1t8\)
Huawei Cornell-al00a
Huawei Cornell-l29a Firmware<9.1.0.328\(c185e1r1p9t8\)
Huawei Cornell-l29a
Huawei Cornell-l29a Firmware<9.1.0.328\(c432e1r1p9t8\)
Huawei Cornell-l29a Firmware<9.1.0.330\(c461e1r1p9t8\)
Huawei Cornell-l29a Firmware<9.1.0.328\(c636e2r1p12t8\)
Huawei Emily-l09c Firmware<9.1.0.336\(c605e4r1p12t8\)
Huawei Emily-l09c
Huawei Emily-l09c Firmware<9.1.0.311\(c185e2r1p12t8\)
Huawei Emily-l09c Firmware<9.1.0.345\(c432e10r1p12t8\)
Huawei Emily-l29c Firmware<9.1.0.311\(c605e2r1p12t8\)
Huawei Emily-l29c
Huawei Emily-l29c Firmware<9.1.0.311\(c636e7r1p13t8\)
Huawei Emily-l29c Firmware<9.1.0.311\(c432e7r1p11t8\)
Huawei Ever-l29b Firmware<9.1.0.311\(c185e3r3p1\)
Huawei Ever-l29b
Huawei Ever-l29b Firmware<9.1.0.310\(c636e3r2p1\)
Huawei Ever-l29b Firmware<9.1.0.310\(c432e3r1p12\)
Huawei Mate 20 Firmware<9.1.0.131\(c00e131r3p1\)
HUAWEI Mate 20
Huawei Mate 20 Pro Firmware<9.1.0.310\(c185e10r2p1\)
HUAWEI Mate 20 Pro
Huawei Mate 20 Rs Firmware<9.1.0.135\(c786e133r3p1\)
HUAWEI Mate 20 RS
Huawei Mate 20 X Firmware<9.1.0.135\(c00e133r2p1\)
HUAWEI Mate 20 X
Huawei P20 Firmware<9.1.0.333\(c00e333r1p1t8\)
HUAWEI P20
Huawei P20 Pro Firmware<9.1.0.333\(c00e333r1p1t8\)
HUAWEI P20 Pro
Huawei P30 Firmware<9.1.0.193
HUAWEI P30
Huawei P30 Pro Firmware<9.1.0.186\(c00e180r2p1\)
HUAWEI P30 Pro
Huawei Y9 2019 Firmware<9.1.0.220\(c605e3r1p1t8\)
HUAWEI Y9 2019
Huawei Nova Lite 3 Firmware<9.1.0.305\(c635e8r2p2\)
HUAWEI nova lite 3
Huawei Honor 10 Lite Firmware<9.1.0.283\(c605e8r2p2\)
Huawei Honor 10 Lite
Huawei Honor 8x Firmware<9.1.0.221\(c461e2r1p1t8\)
Huawei Honor 8x
Huawei Honor View 20 Firmware<9.1.0.238\(c432e1r3p1\)
Huawei Honor View 20
Huawei Jackman-l22 Firmware<9.1.0.247\(c636e2r4p1t8\)
Huawei Jackman-l22
Huawei Paris-l21b Firmware<9.1.0.331\(c432e1r1p2t8\)
Huawei Paris-l21b
Huawei Paris-l21meb Firmware<9.1.0.331\(c185e4r1p3t8\)
Huawei Paris-l21meb
Huawei Paris-l29b Firmware<9.1.0.331\(c636e1r1p3t8\)
Huawei Paris-l29b
Huawei Sydney-al00 Firmware<9.1.0.212\(c00e62r1p7t8\)
Huawei Sydney-al00
Huawei Sydney-l21 Firmware<9.1.0.215\(c432e1r1p1t8\)
Huawei Sydney-l21
Huawei Sydney-l21 Firmware<9.1.0.213\(c185e1r1p1t8\)
Huawei Sydney-l21br Firmware<9.1.0.213\(c185e1r1p2t8\)
Huawei Sydney-l21br
Huawei Sydney-l22 Firmware<9.1.0.258\(c636e1r1p1t8\)
Huawei Sydney-l22
Huawei Sydney-l22br Firmware<9.1.0.258\(c636e1r1p1t8\)
Huawei Sydney-l22br
Huawei Sydneym-al00 Firmware<9.1.0.228\(c00e78r1p7t8\)
Huawei Sydneym-al00
Huawei Sydneym-l01 Firmware<9.1.0.215\(c782e2r1p1t8\)
Huawei Sydneym-l01
Huawei Sydneym-l01 Firmware<9.1.0.213\(c185e1r1p1t8\)
Huawei Sydneym-l01 Firmware<9.1.0.270\(c432e3r1p1t8\)
Huawei Sydneym-l03 Firmware<9.1.0.217\(c605e1r1p1t8\)
Huawei Sydneym-l03
Huawei Sydneym-l21 Firmware<9.1.0.221\(c461e1r1p1t8\)
Huawei Sydneym-l21
Huawei Sydneym-l21 Firmware<9.1.0.215\(c432e4r1p1t8\)
Huawei Sydneym-l22 Firmware<9.1.0.259\(c185e1r1p2t8\)
Huawei Sydneym-l22
Huawei Sydneym-l22 Firmware<9.1.0.220\(c635e1r1p2t8\)
Huawei Sydneym-l22 Firmware<9.1.0.216\(c569e1r1p1t8\)
Huawei Sydneym-l23 Firmware<9.1.0.226\(c605e2r1p1t8\)
Huawei Sydneym-l23
Huawei Yale-l21a Firmware<9.1.0.154\(c432e2r3p2\)
Huawei Yale-l21a
Huawei Yale-l21a Firmware<9.1.0.154\(c461e2r2p1\)
Huawei Yale-l21a Firmware<9.1.0.154\(c636e2r2p1\)
Huawei Honor 20 Firmware<9.1.0.152\(c00e150r5p1\)
Huawei Honor 20
Huawei Honor Magic2 Firmware<10.0.0.187
Huawei Honor Magic2
Huawei Honor V20 Firmware<9.1.0.234\(c00e234r4p3\)
Huawei Honor V20

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203