CVE-2019-5276

Huawei smart phones with earlier versions than ELLE-AL00B 9.1.0.222(C00E220R2P1) have a buffer overflow vulnerability. An attacker may intercept and tamper with the packet in the local area network (LAN) to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal.

Score

CVSS 3.1 8.8 High

Status

Modified - psirt@huawei.com

Published

2019-12-23

Last modified

2024-08-04

Weaknesses

CWE-120

Affected products

• Elle-al00b (Huawei)
• Elle-al00b Firmware (Huawei)

References

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191218-02-smartphone-en