CVE-2019-5306: Huawei p20 Firmware

Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days.

There is a Factory Reset Protection (FRP) bypass security vulnerability in P20 Huawei smart phones versions before Emily-AL00A 9.0.0.167(C00E81R1P21T8). When re-configuring the mobile phone using the FRP function, an attacker can delete the activation lock after a series of operations. As a result, the FRP function is bypassed and the attacker gains access to the smartphone.

Affected products

• Huawei p20 Firmware: before emily-al00a_9.0.0.167\(c00e81r1p21t8\) (fixed in emily-al00a_9.0.0.167\(c00e81r1p21t8\))

Published 2019-06-04. Last modified 2026-06-17.