medium5.3
CVE-2019-5235
Some Huawei smart phones have a null pointer dereference vulnerability.
Impact
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Alp-Al00b Firmware | Version 8.0.0.153\(c00\) |
| Huawei | Alp-Tl00b Firmware | Version 8.0.0.129\(sp2c01\) |
| Huawei | Bla-Al00b Firmware | Versions 8.0.0.129\(sp2c786\), 8.0.0.153\(c00\) |
| Huawei | Bla-Tl00b Firmware | Version 8.0.0.129\(sp2c01\) |
| Huawei | Charlotte-Al00a Firmware | Version 8.1.0.176\(c00\) |
| Huawei | Charlotte-Tl00b Firmware | Version 8.1.0.176\(c01\) |
| Huawei | Columbia-Al10b Firmware | Version 8.1.0.163\(c00\) |
| Huawei | Columbia-Al10i Firmware | Version 8.1.0.150\(c675custc675d2\) |
| Huawei | Columbia-L29d Firmware | Versions 8.1.0.146\(c461\), 8.1.0.148\(c185\), 8.1.0.151\(c10\), 8.1.0.151\(c432\) |
| Huawei | Columbia-Tl00d Firmware | Version 8.1.0.186\(c01gt\) |
| Huawei | Elle-Al00b Firmware | Version 9.1.0.162\(c00e160r2p1\) |
| Huawei | Elle-Tl00b Firmware | Version 9.1.0.162\(c01e160r2p1\) |