CVE-2019-5296

Mate20 Huawei smartphones versions earlier than HMA-AL00C00B175 have an out-of-bounds read vulnerability. An attacker with a high permission runs some specific commands on the smartphone. Due to insufficient input verification, successful exploit may cause out-of-bounds read of the memory and the system abnormal.

• CWE-125

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-phone-enVendor Advisory
• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-phone-enVendor Advisory

Published

Jun 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5290Huawei S5700 and S6700 have a DoS security vulnerability. At…6.5
• CVE-2019-5291Some Huawei products have an insufficient verification of da…5.9
• CVE-2019-5292Honor 10 Lite, Honor 8A, Huawei Y6 mobile phones with the ve…3.3
• CVE-2019-5293Some Huawei products have a memory leak vulnerability when h…6.5
• CVE-2019-5294There is an out of bound read vulnerability in some Huawei p…7.5
• CVE-2019-5295Huawei Honor V10 smartphones versions earlier than Berkeley-…
• CVE-2019-5297Emily-L29C Huawei phones versions earlier than 9.0.0.159 (C1…
• CVE-2019-5298There is an improper authentication vulnerability in some Hu…
• CVE-2019-5299Huawei mobile phones Hima-AL00Bhave with Versions earlier th…
• CVE-2019-5300There is a digital signature verification bypass vulnerabili…
• CVE-2019-5301Huawei smart phones Honor V20 with the versions before 9.0.1…
• CVE-2019-5302There are two denial of service vulnerabilities on some Huaw…5.3