CVE-2019-5235 Null dereference in Harry-AL00C, Harry-AL00C-PRELOAD, Harry-AL10B, Harry-LGRP1-CHN, Harry-TL00C, Jackman-AL00D, Jackman-L03, Jackman-L21, Jackman-L22, Jackman-L23, Johnson-AL00C, Johnson-AL00IC, Johnson-AL10C, Johnson-L21C, Johnson-L21D, Johnson-L22C, Johnson-L22D, Johnson-L23C, Johnson-L42IC, Johnson-L42IE, Johnson-L42IF, Johnson-TL00D, Johnson-TL00F, Potter-AL00C, Potter-AL10A, VOGUE-AL00A, VOGUE-AL00A-PRELOAD, VOGUE-AL10C, VOGUE-AL10C-PRELOAD, VOGUE-LGRP1-CHN, VOGUE-LGRP2-OVS, VOGUE-TL00B

What is CVE-2019-5235?

CVE-2019-5235 is a medium-severity vulnerability in Harry-AL00C, Harry-AL00C-PRELOAD, Harry-AL10B, Harry-LGRP1-CHN, Harry-TL00C, Jackman-AL00D, Jackman-L03, Jackman-L21, Jackman-L22, Jackman-L23, Johnson-AL00C, Johnson-AL00IC, Johnson-AL10C, Johnson-L21C, Johnson-L21D, Johnson-L22C, Johnson-L22D, Johnson-L23C, Johnson-L42IC, Johnson-L42IE, Johnson-L42IF, Johnson-TL00D, Johnson-TL00F, Potter-AL00C, Potter-AL10A, VOGUE-AL00A, VOGUE-AL00A-PRELOAD, VOGUE-AL10C, VOGUE-AL10C-PRELOAD, VOGUE-LGRP1-CHN, VOGUE-LGRP2-OVS, VOGUE-TL00B, published on 13 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.

Weakness: CWE-476

Which versions are affected by CVE-2019-5235?

It affects 50 products.

Products include Huawei Alp-Al00b Firmware, Huawei Alp-Tl00b Firmware, Huawei Bla-Al00b Firmware, Huawei Bla-Tl00b Firmware, Huawei Charlotte-Al00a Firmware, Huawei Charlotte-Tl00b Firmware and 44 more.

How do I fix CVE-2019-5235?

No fix has been published for CVE-2019-5235 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-5235 being exploited?

There is no known exploitation of CVE-2019-5235 in the wild and no public exploit code.

Other vulnerabilities in Harry-AL00C, Harry-AL00C-PRELOAD, Harry-AL10B, Harry-LGRP1-CHN, Harry-TL00C, Jackman-AL00D, Jackman-L03, Jackman-L21, Jackman-L22, Jackman-L23, Johnson-AL00C, Johnson-AL00IC, Johnson-AL10C, Johnson-L21C, Johnson-L21D, Johnson-L22C, Johnson-L22D, Johnson-L23C, Johnson-L42IC, Johnson-L42IE, Johnson-L42IF, Johnson-TL00D, Johnson-TL00F, Potter-AL00C, Potter-AL10A, VOGUE-AL00A, VOGUE-AL00A-PRELOAD, VOGUE-AL10C, VOGUE-AL10C-PRELOAD, VOGUE-LGRP1-CHN, VOGUE-LGRP2-OVS, VOGUE-TL00B

• CVE-2018-7910 Auth bypass in ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C Medium 6.8
• CVE-2019-5302 Denial of service in ALP-AL00B Medium 5.3
• CVE-2019-5303 Denial of service in ALP-AL00B Medium 5.3
• CVE-2019-19412 Security feature bypass in ALP-AL00B Medium 4.6
• CVE-2018-7901 Security feature bypass in ALP-AL00B, BLA-AL00B Medium 4.4

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-5wgx-97x6-5q43.