CVE-2019-5266 Denial of service in Share function P30
Attackers can disable the Huawei Share function on P30 smartphones by sending crafted packets due to insufficient input validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-5266?
CVE-2019-5266 is a high-severity denial of service vulnerability in Huawei Share function P30, published on 23 Dec 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an insufficient input validation vulnerability. Attackers can exploit this vulnerability by sending crafted packets to the affected device. Successful exploit may cause the function will be disabled.
Weakness: CWE-20
Which versions are affected by CVE-2019-5266?
It affects 1 product.
Products include Huawei P30 Firmware.
How do I fix CVE-2019-5266?
No fix has been published for CVE-2019-5266 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2019-5266 being exploited?
There is no known exploitation of CVE-2019-5266 in the wild and no public exploit code.
Other vulnerabilities in Huawei Share function P30
Sources
Also known as GHSA-832g-5px4-fqqf.