medium
5.3
CWE
20
Advisory Published
Updated

CVE-2019-5302: Input Validation

First published: Mon Apr 27 2020(Updated: )

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Credit: psirt@huawei.com

Affected SoftwareAffected VersionHow to fix
Huawei ALP-AL00B-RSC Firmware<9.1.0.333\(c00e333r2p1t8\)
Huawei ALP-AL00B-RSC Firmware
Huawei ALP-L09<9.1.0.300\(c432e4r1p9t8\)
Huawei ALP-L09 firmware
Huawei Vie-l29 Firmware<9.1.0.315\(c636e5r1p13t8\)
Huawei ALP-L29
Huawei BLA-L29C Firmware<9.1.0.321\(c636e4r1p14t8\)
Huawei BLA-L29
Huawei BLA-L29C Firmware<9.1.0.330\(c432e6r1p12t8\)
Huawei BLA-L29C Firmware<9.1.0.302\(c635e4r1p13t8\)
Huawei Berkeley-AL20 Firmware<9.1.0.333\(c00e333r2p1t8\)
Huawei Berkeley-AL20 Firmware
Huawei P10 Firmware<9.1.0.350\(c10e3r1p14t8\)
Huawei P10
Huawei P10 Firmware<9.1.0.351\(c432e5r1p13t8\)
Huawei P10 Firmware<9.1.0.350\(c636e4r1p13t8\)
Huawei Charlotte-L09C<9.1.0.311\(c185e4r1p11t8\)
Huawei Charlotte-L09C
Huawei Charlotte-L09C<9.1.0.345\(c432e8r1p11t8\)
Huawei Charlotte L29C<9.1.0.325\(c185e4r1p11t8\)
Huawei Charlotte L29C
Huawei Charlotte L29C<9.1.0.335\(c636e3r1p13t8\)
Huawei Charlotte L29C<9.1.0.345\(c432e8r1p11t8\)
Huawei Charlotte L29C<9.1.0.336\(c605e3r1p12t8\)
Huawei Columbia-AL10B<9.1.0.333\(c00e333r1p1t8\)
Huawei Columbia-AL10B Firmware
Huawei LON-L29D<9.1.0.350\(c461e3r1p11t8\)
Huawei Columbia-L29D Firmware
Huawei LON-L29D<9.1.0.350\(c185e3r1p12t8\)
Huawei LON-L29D<9.1.0.350\(c10e5r1p14t8\)
Huawei LON-L29D<9.1.0.351\(c432e5r1p13t8\)
Huawei Cornell-AL00A Firmware<9.1.0.333\(c00e333r1p1t8\)
Huawei Cornell-AL00A Firmware
Huawei Cornell-L29A<9.1.0.328\(c185e1r1p9t8\)
Huawei Cornell-L29A Firmware
Huawei Cornell-L29A<9.1.0.328\(c432e1r1p9t8\)
Huawei Cornell-L29A<9.1.0.330\(c461e1r1p9t8\)
Huawei Cornell-L29A<9.1.0.328\(c636e2r1p12t8\)
Huawei Emily-L09C<9.1.0.336\(c605e4r1p12t8\)
Huawei Emily-L09C firmware
Huawei Emily-L09C<9.1.0.311\(c185e2r1p12t8\)
Huawei Emily-L09C<9.1.0.345\(c432e10r1p12t8\)
Huawei Emily-L29C Firmware<9.1.0.311\(c605e2r1p12t8\)
Huawei Emily-l29c Firmware
Huawei Emily-L29C Firmware<9.1.0.311\(c636e7r1p13t8\)
Huawei Emily-L29C Firmware<9.1.0.311\(c432e7r1p11t8\)
Huawei EVER-L29B<9.1.0.311\(c185e3r3p1\)
Huawei P10
Huawei EVER-L29B<9.1.0.310\(c636e3r2p1\)
Huawei EVER-L29B<9.1.0.310\(c432e3r1p12\)
Huawei Mate 20 RS Firmware<9.1.0.131\(c00e131r3p1\)
Huawei Mate 20 Pro
Huawei Mate 20 Pro<9.1.0.310\(c185e10r2p1\)
Huawei Mate 20 Pro
Huawei Mate 20 RS Firmware<9.1.0.135\(c786e133r3p1\)
HUAWEI Mate 20 RS
Huawei Mate 20 X Firmware<9.1.0.135\(c00e133r2p1\)
Huawei Mate 20 X Firmware
Huawei P20 Lite<9.1.0.333\(c00e333r1p1t8\)
HUAWEI P20
Huawei P20 Pro Firmware<9.1.0.333\(c00e333r1p1t8\)
HUAWEI P20 Pro
Huawei P30 Firmware<9.1.0.193
HUAWEI P30
Huawei P30 Pro Firmware<9.1.0.186\(c00e180r2p1\)
Huawei P30 Pro Firmware
Huawei Y9 2019 Firmware<9.1.0.220\(c605e3r1p1t8\)
Huawei Y9 2019 Firmware
Huawei Nova Lite 3 Firmware<9.1.0.305\(c635e8r2p2\)
Huawei Nova Lite 3 Firmware
Huawei Honor 10 Lite<9.1.0.283\(c605e8r2p2\)
Huawei Honor 10 Lite Firmware
Huawei Honor 8X Firmware<9.1.0.221\(c461e2r1p1t8\)
Huawei Honor 8X
HUAWEI Honor V20 firmware<9.1.0.238\(c432e1r3p1\)
Huawei Honor View 20 Firmware
Huawei Jackman-L22<9.1.0.247\(c636e2r4p1t8\)
Huawei Jackman-L22 firmware
Huawei Paris-L21 Firmware<9.1.0.331\(c432e1r1p2t8\)
Huawei Paris-l21b Firmware
Huawei Paris-L21 Firmware<9.1.0.331\(c185e4r1p3t8\)
Huawei Paris-L21 Firmware
Huawei PARIS-L29B<9.1.0.331\(c636e1r1p3t8\)
Huawei EVER-L29B
Huawei Sydney-AL00<9.1.0.212\(c00e62r1p7t8\)
Huawei Sydney
Huawei Sydney-L21<9.1.0.215\(c432e1r1p1t8\)
Huawei Sydney
Huawei Sydney-L21<9.1.0.213\(c185e1r1p1t8\)
Huawei Sydney-L21BR<9.1.0.213\(c185e1r1p2t8\)
Huawei Sydney
Huawei Nem-l22 Firmware<9.1.0.258\(c636e1r1p1t8\)
Huawei Sydney-L22BR
Huawei Sydney-L22BR<9.1.0.258\(c636e1r1p1t8\)
Huawei Sydney
Huawei SydneyM-AL00 Firmware<9.1.0.228\(c00e78r1p7t8\)
Huawei SydneyM-AL00 Firmware
Huawei SYDNEYM-L01<9.1.0.215\(c782e2r1p1t8\)
Huawei Sydney
Huawei SYDNEYM-L01<9.1.0.213\(c185e1r1p1t8\)
Huawei SYDNEYM-L01<9.1.0.270\(c432e3r1p1t8\)
Huawei Sydneym-L03<9.1.0.217\(c605e1r1p1t8\)
Huawei Sydney
Huawei Sydney<9.1.0.221\(c461e1r1p1t8\)
Huawei SYDNEYM-L21 Firmware
Huawei Sydney<9.1.0.215\(c432e4r1p1t8\)
Huawei SYDNEYM-L22<9.1.0.259\(c185e1r1p2t8\)
Huawei SYDNEYM-L22
Huawei SYDNEYM-L22<9.1.0.220\(c635e1r1p2t8\)
Huawei SYDNEYM-L22<9.1.0.216\(c569e1r1p1t8\)
Huawei Sydney-M-L23<9.1.0.226\(c605e2r1p1t8\)
Huawei Sydney-M-L23
Huawei Yale-l21a<9.1.0.154\(c432e2r3p2\)
Huawei Yale-L21A
Huawei Yale-l21a<9.1.0.154\(c461e2r2p1\)
Huawei Yale-l21a<9.1.0.154\(c636e2r2p1\)
Huawei Honor 20s firmware<9.1.0.152\(c00e150r5p1\)
Huawei Honor 20 Firmware
HUAWEI Honor Magic 2 firmware<10.0.0.187
HUAWEI Honor Magic 2 firmware
Huawei Honor View 20 Firmware<9.1.0.234\(c00e234r4p3\)
Huawei Honor View 20

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2019-5302?

    CVE-2019-5302 has been classified as a denial of service vulnerability affecting various Huawei smartphones.

  • How do I fix CVE-2019-5302?

    To fix CVE-2019-5302, update the affected Huawei device to the latest firmware version provided by Huawei.

  • Which devices are affected by CVE-2019-5302?

    CVE-2019-5302 affects multiple Huawei smartphone models including ALP-AL00B, ALP-L09, ALP-L29, and others listed in the advisory.

  • Can CVE-2019-5302 be exploited remotely?

    Yes, CVE-2019-5302 can be exploited remotely through specially crafted TD-SCDMA messages from a rogue base station.

  • What kind of impact can CVE-2019-5302 have on my device?

    Exploitation of CVE-2019-5302 may lead to denial of service, causing the affected Huawei device to become unresponsive.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203