CVE-2019-5235
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts...
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.
- Record
CVE-2019-5235- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-02
CVE List No score
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.
- Record
CVE-2019-5235- Updated
- 2026-11-02
EUVDEUVD-2019-14840 No score
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.
- Record
EUVD-2019-14840- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5wgx-97x6-5q43 No score
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts...
Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.
- Record
GHSA-5wgx-97x6-5q43- Updated
- 2026-11-02
Affected products
- huawei alp-al00b firmware
- huawei alp-tl00b firmware
- huawei bla-al00b firmware
- huawei bla-tl00b firmware
- huawei charlotte-al00a firmware
- huawei charlotte-tl00b firmware
- huawei columbia-al10b firmware
- huawei columbia-al10i firmware
- huawei columbia-l29d firmware
- huawei columbia-tl00d firmware
- huawei elle-al00b firmware
- huawei elle-tl00b firmware
Show 38 moreShow less
- huawei emily-al00a firmware
- huawei emily-tl00b firmware
- huawei ever-al00b firmware
- huawei ever-l29b firmware
- huawei harry-al00c firmware
- huawei harry-al10b firmware
- huawei harry-tl00c firmware
- huawei hima-al00b firmware
- huawei jackman-l21 firmware
- huawei jackman-l22 firmware
- huawei jackman-l23 firmware
- huawei johnson-al00ic firmware
- huawei johnson-al10c firmware
- huawei johnson-l21c firmware
- huawei johnson-l21d firmware
- huawei johnson-l22c firmware
- huawei johnson-l22d firmware
- huawei johnson-l23c firmware
- huawei johnson-l42ic firmware
- huawei johnson-l42ie firmware
- huawei johnson-l42if firmware
- huawei johnson-tl00d firmware
- huawei johnson-tl00f firmware
- huawei laya-al00ep firmware
- huawei neo-al00d firmware
- huawei potter-al00c firmware
- huawei potter-al10a firmware
- huawei princeton-al10b firmware
- huawei princeton-al10d firmware
- huawei princeton-al10i firmware
- huawei princeton-tl10c firmware
- huawei tony-al00b firmware
- huawei tony-tl00b firmware
- huawei vogue-al00a-preload firmware
- huawei vogue-al00a firmware
- huawei vogue-al10c-preload firmware
- huawei vogue-al10c firmware
- huawei vogue-tl00b firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-5235 is a medium vulnerability (CVSS 5.3) in Huawei Alp-al00b Firmware, published December 13, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.92%, the 60th percentile. No source names a fixed version.