CVE-2019-5287
Last modified
CVE-2019-5287 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters to the camera program to exploit this vulnerability. EPSS estimates a 0.94% chance of exploitation in the next 30 days.
Description
P30 smart phones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R2P1) have an integer overflow vulnerability due to insufficient check on specific parameters. An attacker tricks the user into installing a malicious application, obtains the root permission and constructs specific parameters to the camera program to exploit this vulnerability. Successful exploit could cause the program to break down or allow for arbitrary code execution.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | P30 Firmware | < elle-al00b_9.1.0.193\(c00e190r2p1\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-5287?
How severe is CVE-2019-5287?
How do I fix CVE-2019-5287?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-5281There is an information leak vulnerability in some Huawei ph…
- CVE-2019-5282Bastet module of some Huawei smartphones with Versions earli…7.8
- CVE-2019-5283There is Factory Reset Protection (FRP) bypass security vuln…
- CVE-2019-5284There is a DoS vulnerability in RTSP module of Leland-AL00A …6.5
- CVE-2019-5285Some Huawei S series switches have a DoS vulnerability. An u…
- CVE-2019-5286There is a reflection XSS vulnerability in the HedEx product…
- CVE-2019-5288P30 smart phones with versions earlier than ELLE-AL00B 9.1.0…7.8
- CVE-2019-5289Gauss100 OLTP database in ManageOne with versions of 6.5.0 h…7.5
- CVE-2019-5290Huawei S5700 and S6700 have a DoS security vulnerability. At…6.5
- CVE-2019-5291Some Huawei products have an insufficient verification of da…5.9
- CVE-2019-5292Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the ve…3.3
- CVE-2019-5293Some Huawei products have a memory leak vulnerability when h…6.5
Are you affected by CVE-2019-5287?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
