CVE-2019-19412: Huawei Alp-AL00B Firmware

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.

Affected products

Huawei Alp-AL00B Firmware: before 9.0.0.181\(c00e87r2p20t8\) (fixed in 9.0.0.181\(c00e87r2p20t8\))
Huawei Alp-l09 Firmware: before 9.0.0.201\(c432e4r1p9\) (fixed in 9.0.0.201\(c432e4r1p9\))
Huawei Alp-l29 Firmware: before 9.0.0.177\(c185e2r1p12t8\) (fixed in 9.0.0.177\(c185e2r1p12t8\)); before 9.0.0.195\(c636e2r1p12\) (fixed in 9.0.0.195\(c636e2r1p12\))
Huawei Anne-AL00 Firmware: before 8.0.0.168\(c00\) (fixed in 8.0.0.168\(c00\))
Huawei Berkeley-AL20 Firmware: before 9.0.0.156\(c00e156r2p14t8\) (fixed in 9.0.0.156\(c00e156r2p14t8\))
Huawei Berkeley-l09 Firmware: before 8.0.0.172\(c432\) (fixed in 8.0.0.172\(c432\)); before 8.0.0.173\(c636\) (fixed in 8.0.0.173\(c636\))
Huawei Bla-AL00B Firmware: before 9.0.0.181\(c00e88r2p15t8\) (fixed in 9.0.0.181\(c00e88r2p15t8\))
Huawei Bla-l09c Firmware: before 9.0.0.177\(c185e2r1p13t8\) (fixed in 9.0.0.177\(c185e2r1p13t8\)); before 9.0.0.206\(c432e4r1p11\) (fixed in 9.0.0.206\(c432e4r1p11\))
Huawei Bla-l29c Firmware: before 9.0.0.179\(c576e2r1p7t8\) (fixed in 9.0.0.179\(c576e2r1p7t8\)); before 9.0.0.194\(c185e2r1p13\) (fixed in 9.0.0.194\(c185e2r1p13\)); before 9.0.0.206\(c432e4r1p11\) (fixed in 9.0.0.206\(c432e4r1p11\)); before 9.0.0.210\(c635e4r1p13\) (fixed in 9.0.0.210\(c635e4r1p13\))
Huawei Emily-l29c Firmware: before 9.0.0.159\(c185e2r1p12t8\) (fixed in 9.0.0.159\(c185e2r1p12t8\)); before 9.0.0.159\(c461e2r1p11t8\) (fixed in 9.0.0.159\(c461e2r1p11t8\)); before 9.0.0.160\(c432e7r1p11t8\) (fixed in 9.0.0.160\(c432e7r1p11t8\)); before 9.0.0.165\(c605e2r1p12\) (fixed in 9.0.0.165\(c605e2r1p12\)); before 9.0.0.168\(c636e7r1p13t8\) (fixed in 9.0.0.168\(c636e7r1p13t8\)); before 9.0.0.168\(c782e3r1p11t8\) (fixed in 9.0.0.168\(c782e3r1p11t8\)); …
Huawei Figo-l03 Firmware: before 9.1.0.130\(c605e6r1p5t8\) (fixed in 9.1.0.130\(c605e6r1p5t8\))
Huawei Figo-l21 Firmware: before 9.1.0.130\(c185e6r1p5t8\) (fixed in 9.1.0.130\(c185e6r1p5t8\)); before 9.1.0.130\(c635e6r1p5t8\) (fixed in 9.1.0.130\(c635e6r1p5t8\))
Huawei Figo-l23 Firmware: before 9.1.0.130\(c605e6r1p5t8\) (fixed in 9.1.0.130\(c605e6r1p5t8\))
Huawei Figo-l31 Firmware: before 9.1.0.130\(c432e8r1p5t8\) (fixed in 9.1.0.130\(c432e8r1p5t8\))
Huawei Florida-l03 Firmware: before 9.1.0.121\(c605e5r1p1t8\) (fixed in 9.1.0.121\(c605e5r1p1t8\))
Huawei Florida-l21 Firmware: before 8.0.0.129\(c605\) (fixed in 8.0.0.129\(c605\)); before 8.0.0.131\(c432\) (fixed in 8.0.0.131\(c432\)); before 8.0.0.132\(c185\) (fixed in 8.0.0.132\(c185\))
Huawei Florida-l22 Firmware: before 8.0.0.132\(c636\) (fixed in 8.0.0.132\(c636\))
Huawei Florida-l23 Firmware: before 8.0.0.144\(c605\) (fixed in 8.0.0.144\(c605\))
Huawei Honor View 10 Firmware: before 9.0.0.202\(c567e6r1p12t8\) (fixed in 9.0.0.202\(c567e6r1p12t8\))
Huawei Leland-AL00A Firmware: before 8.0.0.182\(c00\) (fixed in 8.0.0.182\(c00\))
Huawei Leland-l21a Firmware: before 8.0.0.135\(c185\) (fixed in 8.0.0.135\(c185\)); before 9.1.0.118\(c636e4r1p1t8\) (fixed in 9.1.0.118\(c636e4r1p1t8\))
Huawei Leland-l22a Firmware: before 9.1.0.118\(c636e4r1p1t8\) (fixed in 9.1.0.118\(c636e4r1p1t8\))
Huawei Leland-l22c Firmware: before 9.1.0.118\(c636e4r1p1t8\) (fixed in 9.1.0.118\(c636e4r1p1t8\))
Huawei Leland-l31a Firmware: before 8.0.0.139\(c432\) (fixed in 8.0.0.139\(c432\))
Huawei Nova 3e Firmware: before 8.0.0.147\(c461\) (fixed in 8.0.0.147\(c461\)); before 8.0.0.148\(zafc185\) (fixed in 8.0.0.148\(zafc185\)); before 8.0.0.160\(c185\) (fixed in 8.0.0.160\(c185\)); before 8.0.0.160\(c605\) (fixed in 8.0.0.160\(c605\)); before 8.0.0.168\(c432\) (fixed in 8.0.0.168\(c432\)); before 8.0.0.172\(c636\) (fixed in 8.0.0.172\(c636\))
and 3 more

Published 2020-06-08. Last modified 2026-06-17.