CVE-2019-5260

Huawei smartphones HUAWEI Y9 2019 and Honor View 20 have a denial of service vulnerability. Due to insufficient input validation of specific value when parsing the messages, an attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices to exploit this vulnerability. Successful exploit may cause an infinite loop and the device to reboot.

Score

CVSS 3.1 6.5 Medium

Status

Modified - psirt@huawei.com

Published

2019-12-13

Last modified

2024-08-04

Weaknesses

CWE-20

Affected products

• View 20 Firmware (Huawei)
• Y9 2019 Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190911-01-mobile-en