cbcvebase.
CVE-2019-5235
published 2019-12-14

CVE-2019-5235: Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this…

PriorityP423medium5.3CVSS 3.1
AVNACLPRNUINSUCNINAL
EPSS
1.04%
60.3th percentile
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.

Affected

65 ranges· showing 25
VendorProductVersion rangeFixed in
huaweialp-al00b_firmware——
huaweialp-tl00b_firmware——
huaweibla-al00b_firmware——
huaweibla-al00b_firmware——
huaweibla-tl00b_firmware——
huaweicharlotte-al00a_firmware——
huaweicharlotte-tl00b_firmware——
huaweicolumbia-al10b_firmware——
huaweicolumbia-al10i_firmware——
huaweicolumbia-l29d_firmware——
huaweicolumbia-l29d_firmware——
huaweicolumbia-l29d_firmware——
huaweicolumbia-l29d_firmware——
huaweicolumbia-tl00d_firmware——
huaweielle-al00b_firmware——
huaweielle-tl00b_firmware——
huaweiemily-al00a_firmware——
huaweiemily-tl00b_firmware——
huaweiever-al00b_firmware——
huaweiever-l29b_firmware——
huaweiever-l29b_firmware——
huaweiever-l29b_firmware——
huaweiharry-al00c_firmware——
huaweiharry-al10b_firmware——
huaweiharry-tl00c_firmware——

CVSS provenance

nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.