CVE-2019-5251

There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An attacker could trick the user into installing, backing up and restoring a malicious application. Successful exploit could cause information disclosure.

Score

CVSS 3.1 5.5 Medium

Status

Modified - psirt@huawei.com

Published

2019-12-13

Last modified

2024-08-04

Weaknesses

CWE-22

Affected products

• Enjoy 7s Firmware (Huawei)
• Honor 20s Firmware (Huawei)
• Honor 9 Lite Firmware (Huawei)
• Honor 9i Firmware (Huawei)
• Honor V10 Firmware (Huawei)
• M6 Firmware (Huawei)
• Mate 20 Firmware (Huawei)
• P30 Firmware (Huawei)
• P30 Pro Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191204-03-smartphone-en