CVE-2019-5224

Description

P30 smartphones with versions earlier than ELLE-AL00B 9.1.0.193(C00E190R1P21) have an out of bounds read vulnerability. The system does not properly validate certain length parameter which an application transports to kernel. An attacker tricks the user to install a malicious application, successful exploit could cause out of bounds read and information disclosure.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.14

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities affected in p30_firmware 9.1.0.226(c00e220r2p1)NCM
Multiple Vulnerabilities affected in p30_firmware 9.1.0.193(c00e190r2p1)NCM
Multiple Vulnerabilities affected in p30_firmware 9.1.0.193NCM
Multiple Vulnerabilities affected in p30_firmware elle-al00b_9.1.0.186(c00e180r2p1)NCM
Multiple Vulnerabilities affected in p30_firmware ele-al00_9.1.0.162(c01e160r1p12/c01e160r2p1)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.160(c01e160r2p11)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.160(c00e160r3p8)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.160(c00e160r2p11)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.135(c00e135r2p11)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.128(c635e3r2p4)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.126(c636e7r3p4)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.126(c605e19r1p3)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.126(c461e7r3p1)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.126(c185e4r7p1)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.126(c10e7r5p1)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.123(c432e22r2p5)NCM
Multiple Vulnerabilities affected in p30_firmware 10.1.0.123(c431e22r2p5)NCM
Multiple Vulnerabilities affected in p30_firmware 10.0.0.185(c00e85r1p11)NCM
Multiple Vulnerabilities affected in p30_firmware 10.0.0.173(c00e73r1p11)NCM
Multiple Vulnerabilities affected in p30_firmware 10.0.0.166(c00e66r1p11)NCM
Out-of-bounds Read Vulnerability (CVE-2019-5224)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234