CVE-2019-5235: Huawei Alp-AL00B Firmware

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

Some Huawei smart phones have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone to be abnormal.

Affected products

  • Huawei Alp-AL00B Firmware: version 8.0.0.153(c00) only
  • Huawei Alp-TL00B Firmware: version 8.0.0.129(sp2c01) only
  • Huawei Bla-AL00B Firmware: version 8.0.0.129(sp2c786) only; version 8.0.0.153(c00) only
  • Huawei Bla-TL00B Firmware: version 8.0.0.129(sp2c01) only
  • Huawei Charlotte-AL00A Firmware: version 8.1.0.176(c00) only
  • Huawei Charlotte-TL00B Firmware: version 8.1.0.176(c01) only
  • Huawei Columbia-AL10B Firmware: version 8.1.0.163(c00) only
  • Huawei Columbia-AL10I Firmware: version 8.1.0.150(c675custc675d2) only
  • Huawei Columbia-l29d Firmware: version 8.1.0.146(c461) only; version 8.1.0.148(c185) only; version 8.1.0.151(c10) only; version 8.1.0.151(c432) only
  • Huawei Columbia-TL00D Firmware: version 8.1.0.186(c01gt) only
  • Huawei Elle-AL00B Firmware: version 9.1.0.162(c00e160r2p1) only
  • Huawei Elle-TL00B Firmware: version 9.1.0.162(c01e160r2p1) only
  • Huawei Emily-AL00A Firmware: version 8.1.0.190(c00) only
  • Huawei Emily-TL00B Firmware: version 8.1.0.175(c01) only
  • Huawei Ever-AL00B Firmware: version 9.0.0.195(c00e195r2p1) only
  • Huawei Ever-l29b Firmware: version 9.0.0.206(c185e3r3p1) only; version 9.0.0.207(c636e3r2p1) only; version 9.0.0.208(c432e3r1p12) only
  • Huawei Harry-AL00C Firmware: version 9.1.0.206(c00e205r3p1) only
  • Huawei Harry-AL10B Firmware: affected versions not specified; version 9.1.0.206(c00e205r3p1) only
  • Huawei Harry-TL00C Firmware: version 9.0.1.162(c01e160r2p3) only
  • Huawei Hima-AL00B Firmware: version 9.0.0.200(c00e200r2p1) only
  • Huawei Jackman-l21 Firmware: version 8.2.0.160(c185) only
  • Huawei Jackman-l22 Firmware: version 8.2.0.156(c636r2p2) only
  • Huawei Jackman-l23 Firmware: version 8.2.0.152(c45custc45d1) only; version 8.2.0.162(c605) only
  • Huawei Johnson-AL00IC Firmware: version 8.2.0.161(c675custc675d1) only
  • Huawei Johnson-AL10C Firmware: version 8.2.0.165(c00r1p16) only
  • and 25 more

Published 2019-12-14. Last modified 2026-06-17.