vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-5302

MEDIUM
5.3
CVSS Score
Published: April 27, 2020 at 07:50 PM UTC
Updated: June 17, 2026 at 02:37 AM UTC
94 products affected across 1 vendorP30 FirmwareMate 20 FirmwareP30 Pro Firmware

Using Sydney-L21 by Huawei?

Get instant alerts when new vulnerabilities affect Sydney-L21 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.3
Exploit prediction
EPSS 0.3%

Description

There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Alp AL00B Firmware· Huawei
95%
v < 9.1.0.333(c00e333r2p1t8)
Affected range stops below 9.1.0.333(c00e333r2p1t8), so it looks safe — our inference, not a vendor statement
huawei-alp-al00b (same device)
Alp L09 Firmware· Huawei
95%
v < 9.1.0.300v < 9.1.0.300(c432e4r1p9t8)
Affected range stops below 9.1.0.300, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.300(c432e4r1p9t8), so it looks safe — our inference, not a vendor statement
huawei-alp-l09 (same device)
Alp L29 Firmware· Huawei
95%
v < 9.1.0.315v < 9.1.0.315(c636e5r1p13t8)
Affected range stops below 9.1.0.315, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.315(c636e5r1p13t8), so it looks safe — our inference, not a vendor statement
huawei-alp-l29 (same device)
Berkeley AL20 Firmware· Huawei
95%
v < 9.1.0.333v < 9.1.0.333(c00e333r2p1t8)
Affected range stops below 9.1.0.333, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.333(c00e333r2p1t8), so it looks safe — our inference, not a vendor statement
huawei-berkeley-al20 (same device)
Berkeley L09 Firmware· Huawei
95%
v < 9.1.0.350(c10e3r1p14t8)v < 9.1.0.350(c636e4r1p13t8)v < 9.1.0.351(c432e5r1p13t8)
Affected range stops below 9.1.0.350(c10e3r1p14t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.350(c636e4r1p13t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.351(c432e5r1p13t8), so it looks safe — our inference, not a vendor statement
huawei-berkeley-l09 (same device)
Bla L29C Firmware· Huawei
95%
v < 9.1.0.302(c635e4r1p13t8)v < 9.1.0.321(c636e4r1p14t8)v < 9.1.0.330(c432e6r1p12t8)
Affected range stops below 9.1.0.302(c635e4r1p13t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.321(c636e4r1p14t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.330(c432e6r1p12t8), so it looks safe — our inference, not a vendor statement
huawei-bla-l29c (same device)
Charlotte L09C Firmware· Huawei
95%
v < 9.1.0.311v < 9.1.0.311(c185e4r1p11t8)v < 9.1.0.345v < 9.1.0.345(c432e8r1p11t8)
Affected range stops below 9.1.0.311, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.311(c185e4r1p11t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.345, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.345(c432e8r1p11t8), so it looks safe — our inference, not a vendor statement
huawei-charlotte-l09c (same device)
Charlotte L29C Firmware· Huawei
95%
v < 9.1.0.325v < 9.1.0.325(c185e4r1p11t8)v < 9.1.0.335v < 9.1.0.335(c636e3r1p13t8)v < 9.1.0.336v < 9.1.0.336(c605e3r1p12t8)v < 9.1.0.345v < 9.1.0.345(c432e8r1p11t8)
Affected range stops below 9.1.0.325, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.325(c185e4r1p11t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.335, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.335(c636e3r1p13t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.336, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.336(c605e3r1p12t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.345, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.345(c432e8r1p11t8), so it looks safe — our inference, not a vendor statement
huawei-charlotte-l29c (same device)
Columbia AL10B Firmware· Huawei
95%
v < 9.1.0.333v < 9.1.0.333(c00e333r1p1t8)
Affected range stops below 9.1.0.333, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.333(c00e333r1p1t8), so it looks safe — our inference, not a vendor statement
huawei-columbia-al10b (same device)
Columbia L29D Firmware· Huawei
95%
v < 9.1.0.350v < 9.1.0.350(c10e5r1p14t8)v < 9.1.0.350(c185e3r1p12t8)v < 9.1.0.350(c461e3r1p11t8)v < 9.1.0.351v < 9.1.0.351(c432e5r1p13t8)
Affected range stops below 9.1.0.350, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.350(c10e5r1p14t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.350(c185e3r1p12t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.350(c461e3r1p11t8), so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.351, so it looks safe — our inference, not a vendor statement
Affected range stops below 9.1.0.351(c432e5r1p13t8), so it looks safe — our inference, not a vendor statement
huawei-columbia-l29d (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190814-01-mobile-en

CVSS

5.3MEDIUM[email protected]
Attack Vector
ADJACENT_NETWORK
Complexity
HIGH
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card