Details of VAR-202004-0618

ID

VAR-202004-0618

CVE

CVE-2019-5302

TITLE

plural Huawei Input verification vulnerabilities on smartphones

Trust: 0.8

sources: JVNDB: JVNDB-2019-015525

DESCRIPTION

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3). plural Huawei There is a vulnerability related to input confirmation on smartphones.Service operation interruption (DoS) It may be put into a state. Huawei Honor10 Lite and Huawei Y9 are both smartphones from China's Huawei. A denial of service vulnerability exists in Huawei Honor10 Lite Harry-AL00C versions earlier than 9.1.0.217 (C00E215R3P1) and before Huawei Y9 Jackman-L23 9.1.0.220 (C45E3R1P1T8). The vulnerability stems from the fact that the two fields are not duplicated when parsing

Trust: 2.25

sources: NVD: CVE-2019-5302 // JVNDB: JVNDB-2019-015525 // CNVD: CNVD-2019-33609 // VULMON: CVE-2019-5302

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2019-33609

AFFECTED PRODUCTS

vendor:	huawei	model:	yale-l21a	scope:	lt	version:	9.1.0.154\(c461e2r2p1\)	Trust: 1.0
vendor:	huawei	model:	sydneym-l03	scope:	lt	version:	9.1.0.217\(c605e1r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	sydneym-l22	scope:	lt	version:	9.1.0.259\(c185e1r1p2t8\)	Trust: 1.0
vendor:	huawei	model:	nova lite 3	scope:	lt	version:	9.1.0.305\(c635e8r2p2\)	Trust: 1.0
vendor:	huawei	model:	alp-al00b	scope:	lt	version:	9.1.0.333\(c00e333r2p1t8\)	Trust: 1.0
vendor:	huawei	model:	bla-l29c	scope:	lt	version:	9.1.0.321\(c636e4r1p14t8\)	Trust: 1.0
vendor:	huawei	model:	charlotte-l29c	scope:	lt	version:	9.1.0.345\(c432e8r1p11t8\)	Trust: 1.0
vendor:	huawei	model:	berkeley-l09	scope:	lt	version:	9.1.0.351\(c432e5r1p13t8\)	Trust: 1.0
vendor:	huawei	model:	alp-l09	scope:	lt	version:	9.1.0.300\(c432e4r1p9t8\)	Trust: 1.0
vendor:	huawei	model:	yale-l21a	scope:	lt	version:	9.1.0.154\(c636e2r2p1\)	Trust: 1.0
vendor:	huawei	model:	p20 pro	scope:	lt	version:	9.1.0.333\(c00e333r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	cornell-l29a	scope:	lt	version:	9.1.0.328\(c185e1r1p9t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l09c	scope:	lt	version:	9.1.0.345\(c432e10r1p12t8\)	Trust: 1.0
vendor:	huawei	model:	cornell-l29a	scope:	lt	version:	9.1.0.328\(c636e2r1p12t8\)	Trust: 1.0
vendor:	huawei	model:	columbia-l29d	scope:	lt	version:	9.1.0.350\(c461e3r1p11t8\)	Trust: 1.0
vendor:	huawei	model:	jackman-l22	scope:	lt	version:	9.1.0.247\(c636e2r4p1t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311\(c636e7r1p13t8\)	Trust: 1.0
vendor:	huawei	model:	sydneym-l01	scope:	lt	version:	9.1.0.213\(c185e1r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	sydneym-l21	scope:	lt	version:	9.1.0.221\(c461e1r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	ever-l29b	scope:	lt	version:	9.1.0.310\(c636e3r2p1\)	Trust: 1.0
vendor:	huawei	model:	bla-l29c	scope:	lt	version:	9.1.0.330\(c432e6r1p12t8\)	Trust: 1.0
vendor:	huawei	model:	mate 20	scope:	lt	version:	9.1.0.131\(c00e131r3p1\)	Trust: 1.0
vendor:	huawei	model:	columbia-l29d	scope:	lt	version:	9.1.0.351\(c432e5r1p13t8\)	Trust: 1.0
vendor:	huawei	model:	cornell-al00a	scope:	lt	version:	9.1.0.333\(c00e333r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	sydneym-al00	scope:	lt	version:	9.1.0.228\(c00e78r1p7t8\)	Trust: 1.0
vendor:	huawei	model:	berkeley-l09	scope:	lt	version:	9.1.0.350\(c10e3r1p14t8\)	Trust: 1.0
vendor:	huawei	model:	columbia-l29d	scope:	lt	version:	9.1.0.350\(c185e3r1p12t8\)	Trust: 1.0
vendor:	huawei	model:	ever-l29b	scope:	lt	version:	9.1.0.310\(c432e3r1p12\)	Trust: 1.0
vendor:	huawei	model:	charlotte-l29c	scope:	lt	version:	9.1.0.325\(c185e4r1p11t8\)	Trust: 1.0
vendor:	huawei	model:	mate 20 pro	scope:	lt	version:	9.1.0.310\(c185e10r2p1\)	Trust: 1.0
vendor:	huawei	model:	sydneym-l01	scope:	lt	version:	9.1.0.215\(c782e2r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	honor view 20	scope:	lt	version:	9.1.0.238\(c432e1r3p1\)	Trust: 1.0
vendor:	huawei	model:	paris-l29b	scope:	lt	version:	9.1.0.331\(c636e1r1p3t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311\(c432e7r1p11t8\)	Trust: 1.0
vendor:	huawei	model:	p30 pro	scope:	lt	version:	9.1.0.186\(c00e180r2p1\)	Trust: 1.0
vendor:	huawei	model:	sydneym-l23	scope:	lt	version:	9.1.0.226\(c605e2r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l29c	scope:	lt	version:	9.1.0.311\(c605e2r1p12t8\)	Trust: 1.0
vendor:	huawei	model:	paris-l21b	scope:	lt	version:	9.1.0.331\(c432e1r1p2t8\)	Trust: 1.0
vendor:	huawei	model:	bla-l29c	scope:	lt	version:	9.1.0.302\(c635e4r1p13t8\)	Trust: 1.0
vendor:	huawei	model:	paris-l21meb	scope:	lt	version:	9.1.0.331\(c185e4r1p3t8\)	Trust: 1.0
vendor:	huawei	model:	mate 20 x	scope:	lt	version:	9.1.0.135\(c00e133r2p1\)	Trust: 1.0
vendor:	huawei	model:	honor 20	scope:	lt	version:	9.1.0.152\(c00e150r5p1\)	Trust: 1.0
vendor:	huawei	model:	yale-l21a	scope:	lt	version:	9.1.0.154\(c432e2r3p2\)	Trust: 1.0
vendor:	huawei	model:	sydney-l22	scope:	lt	version:	9.1.0.258\(c636e1r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	sydney-l22br	scope:	lt	version:	9.1.0.258\(c636e1r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	sydneym-l21	scope:	lt	version:	9.1.0.215\(c432e4r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	cornell-l29a	scope:	lt	version:	9.1.0.330\(c461e1r1p9t8\)	Trust: 1.0
vendor:	huawei	model:	columbia-al10b	scope:	lt	version:	9.1.0.333\(c00e333r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	charlotte-l29c	scope:	lt	version:	9.1.0.336\(c605e3r1p12t8\)	Trust: 1.0
vendor:	huawei	model:	y9 2019	scope:	lt	version:	9.1.0.220\(c605e3r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	sydney-l21	scope:	lt	version:	9.1.0.213\(c185e1r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	alp-l29	scope:	lt	version:	9.1.0.315\(c636e5r1p13t8\)	Trust: 1.0
vendor:	huawei	model:	charlotte-l29c	scope:	lt	version:	9.1.0.335\(c636e3r1p13t8\)	Trust: 1.0
vendor:	huawei	model:	sydneym-l01	scope:	lt	version:	9.1.0.270\(c432e3r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	p30	scope:	lt	version:	9.1.0.193	Trust: 1.0
vendor:	huawei	model:	cornell-l29a	scope:	lt	version:	9.1.0.328\(c432e1r1p9t8\)	Trust: 1.0
vendor:	huawei	model:	honor 8x	scope:	lt	version:	9.1.0.221\(c461e2r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	sydneym-l22	scope:	lt	version:	9.1.0.220\(c635e1r1p2t8\)	Trust: 1.0
vendor:	huawei	model:	berkeley-al20	scope:	lt	version:	9.1.0.333\(c00e333r2p1t8\)	Trust: 1.0
vendor:	huawei	model:	berkeley-l09	scope:	lt	version:	9.1.0.350\(c636e4r1p13t8\)	Trust: 1.0
vendor:	huawei	model:	honor v20	scope:	lt	version:	9.1.0.234\(c00e234r4p3\)	Trust: 1.0
vendor:	huawei	model:	sydney-l21br	scope:	lt	version:	9.1.0.213\(c185e1r1p2t8\)	Trust: 1.0
vendor:	huawei	model:	sydneym-l22	scope:	lt	version:	9.1.0.216\(c569e1r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	columbia-l29d	scope:	lt	version:	9.1.0.350\(c10e5r1p14t8\)	Trust: 1.0
vendor:	huawei	model:	mate 20 rs	scope:	lt	version:	9.1.0.135\(c786e133r3p1\)	Trust: 1.0
vendor:	huawei	model:	ever-l29b	scope:	lt	version:	9.1.0.311\(c185e3r3p1\)	Trust: 1.0
vendor:	huawei	model:	sydney-al00	scope:	lt	version:	9.1.0.212\(c00e62r1p7t8\)	Trust: 1.0
vendor:	huawei	model:	charlotte-l09c	scope:	lt	version:	9.1.0.311\(c185e4r1p11t8\)	Trust: 1.0
vendor:	huawei	model:	p20	scope:	lt	version:	9.1.0.333\(c00e333r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	sydney-l21	scope:	lt	version:	9.1.0.215\(c432e1r1p1t8\)	Trust: 1.0
vendor:	huawei	model:	emily-l09c	scope:	lt	version:	9.1.0.311\(c185e2r1p12t8\)	Trust: 1.0
vendor:	huawei	model:	charlotte-l09c	scope:	lt	version:	9.1.0.345\(c432e8r1p11t8\)	Trust: 1.0
vendor:	huawei	model:	honor magic2	scope:	lt	version:	10.0.0.187	Trust: 1.0
vendor:	huawei	model:	emily-l09c	scope:	lt	version:	9.1.0.336\(c605e4r1p12t8\)	Trust: 1.0
vendor:	huawei	model:	honor 10 lite	scope:	lt	version:	9.1.0.283\(c605e8r2p2\)	Trust: 1.0
vendor:	huawei	model:	alp-al00b	scope:	eq	version:	9.1.0.333(c00e333r2p1t8)	Trust: 0.8
vendor:	huawei	model:	alp-l09	scope:	eq	version:	9.1.0.300(c432e4r1p9t8)	Trust: 0.8
vendor:	huawei	model:	alp-l29	scope:	eq	version:	9.1.0.315(c636e5r1p13t8)	Trust: 0.8
vendor:	huawei	model:	berkeley-al20	scope:	eq	version:	9.1.0.333(c00e333r2p1t8)	Trust: 0.8
vendor:	huawei	model:	berkeley-l09	scope:	eq	version:	9.1.0.350(c10e3r1p14t8)	Trust: 0.8
vendor:	huawei	model:	berkeley-l09	scope:	eq	version:	9.1.0.350(c636e4r1p13t8)	Trust: 0.8
vendor:	huawei	model:	berkeley-l09	scope:	eq	version:	9.1.0.351(c432e5r1p13t8)	Trust: 0.8
vendor:	huawei	model:	bla-l29c	scope:	eq	version:	9.1.0.302(c635e4r1p13t8)	Trust: 0.8
vendor:	huawei	model:	bla-l29c	scope:	eq	version:	9.1.0.321(c636e4r1p14t8)	Trust: 0.8
vendor:	huawei	model:	bla-l29c	scope:	eq	version:	9.1.0.330(c432e6r1p12t8)	Trust: 0.8
vendor:	huawei	model:	honor10 lite <harry-al00c 9.1.0.217	scope:	-	version:	-	Trust: 0.6
vendor:	huawei	model:	y9 <jackman-l23 9.1.0.220	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2019-33609 // JVNDB: JVNDB-2019-015525 // NVD: CVE-2019-5302

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-5302
value:	MEDIUM
Trust: 1.0
NVD:	JVNDB-2019-015525
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2019-33609
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201908-1095
value:	MEDIUM
Trust: 0.6
VULMON:	CVE-2019-5302
value:	LOW
Trust: 0.1

nvd@nist.gov:	CVE-2019-5302
severity:	LOW
baseScore:	2.9
vectorString:	AV:A/AC:M/AU:N/C:N/I:N/A:P
accessVector:	ADJACENT_NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	5.5
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
NVD:	JVNDB-2019-015525
severity:	LOW
baseScore:	2.9
vectorString:	AV:A/AC:M/AU:N/C:N/I:N/A:P
accessVector:	ADJACENT NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2019-33609
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2019-5302
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	ADJACENT
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	1.6
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	JVNDB-2019-015525
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	ADJACENT NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2019-33609 // VULMON: CVE-2019-5302 // JVNDB: JVNDB-2019-015525 // CNNVD: CNNVD-201908-1095 // NVD: CVE-2019-5302

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.8

sources: JVNDB: JVNDB-2019-015525 // NVD: CVE-2019-5302

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-201908-1095

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-201908-1095

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-015525

PATCH

title:	huawei-sa-20190814-01-mobile	url:	https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en	Trust: 0.8
title:	Patch for Huawei Honor10 Lite and Huawei Y9 Denial of Service Vulnerability	url:	https://www.cnvd.org.cn/patchInfo/show/182801	Trust: 0.6
title:	Huawei Honor10 Lite and Huawei Y9 Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=96759	Trust: 0.6
title:	Huawei Security Advisories: Two Denial of Service Vulnerabilities on Some Huawei Smartphones	url:	https://vulmon.com/vendoradvisory?qidtp=huawei_security_advisories&qid=88453f1b990572fac17211a1a9b849ea	Trust: 0.1

sources: CNVD: CNVD-2019-33609 // VULMON: CVE-2019-5302 // JVNDB: JVNDB-2019-015525 // CNNVD: CNNVD-201908-1095

EXTERNAL IDS

db:	NVD	id:	CVE-2019-5302	Trust: 3.1
db:	JVNDB	id:	JVNDB-2019-015525	Trust: 0.8
db:	CNVD	id:	CNVD-2019-33609	Trust: 0.6
db:	CNNVD	id:	CNNVD-201908-1095	Trust: 0.6
db:	VULMON	id:	CVE-2019-5302	Trust: 0.1

sources: CNVD: CNVD-2019-33609 // VULMON: CVE-2019-5302 // JVNDB: JVNDB-2019-015525 // CNNVD: CNNVD-201908-1095 // NVD: CVE-2019-5302

REFERENCES

url:	https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2019-5302	Trust: 1.4
url:	https://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20190814-01-mobile-cn	Trust: 1.2
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-5302	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/20.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: CNVD: CNVD-2019-33609 // VULMON: CVE-2019-5302 // JVNDB: JVNDB-2019-015525 // CNNVD: CNNVD-201908-1095 // NVD: CVE-2019-5302

CREDITS

These two vulnerabilities were discovered by Huawei internal testing.

Trust: 0.6

sources: CNNVD: CNNVD-201908-1095

SOURCES

db:	CNVD	id:	CNVD-2019-33609
db:	VULMON	id:	CVE-2019-5302
db:	JVNDB	id:	JVNDB-2019-015525
db:	CNNVD	id:	CNNVD-201908-1095
db:	NVD	id:	CVE-2019-5302

LAST UPDATE DATE

2024-11-23T22:21:13.412000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2019-33609	date:	2019-09-29T00:00:00
db:	VULMON	id:	CVE-2019-5302	date:	2020-05-05T00:00:00
db:	JVNDB	id:	JVNDB-2019-015525	date:	2020-06-01T00:00:00
db:	CNNVD	id:	CNNVD-201908-1095	date:	2020-09-03T00:00:00
db:	NVD	id:	CVE-2019-5302	date:	2024-11-21T04:44:42.343

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2019-33609	date:	2019-09-29T00:00:00
db:	VULMON	id:	CVE-2019-5302	date:	2020-04-27T00:00:00
db:	JVNDB	id:	JVNDB-2019-015525	date:	2020-06-01T00:00:00
db:	CNNVD	id:	CNNVD-201908-1095	date:	2019-08-14T00:00:00
db:	NVD	id:	CVE-2019-5302	date:	2020-04-27T20:15:12.337