Buffer overflow in Huawei Elle-Al00b
CVE-2019-5276
Huawei smart phones with earlier versions than ELLE-AL00B 9.1.0.222(C00E220R2P1) have a buffer overflow vulnerability. An attacker may intercept and tamper with the packet in the local area network (LAN) to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal.
Vulnerability class: Buffer Overflow
EPSS: 0.004 (29.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Huawei Elle-al00b — versions earlier versions than 9.1.0.222(C00E220R2P1)
- Huawei Elle-al00b_firmware
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-5276?
- CVE-2019-5276 is a high-severity vulnerability in Huawei Elle-Al00b, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.8/10. Published 2019-12-23.
- How severe is CVE-2019-5276?
- High severity. CVSS v3 base score is 8.8 out of 10.