Read the docs
TI-2019-03682 Aliases CVE-2019-5250GHSA-35fq-rqch-cg5p

Improper privilege management in Mate 20 Pro

Priority LOW 35CWE-269Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-269.

Summary

Mate 20 Pro smartphones with versions earlier than 9.1.0.135(C00E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on student mode function. Successful exploit could allow the attacker to bypass the limit of student mode function.

Why it matters now

EPSS 0.006 48th percentileScored 2026-11-07
Fix Fixed Mate 20 Pro: 9.1.0.135(C00E133R3P1)

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Mate 20 Probefore 9.1.0.135(C00E133R3P1)9.1.0.135(C00E133R3P1)Patch availableCNA
  • Mate 20 Pro Vendor— Affected before 9.1.0.135(C00E133R3P1) Fixed in 9.1.0.135(C00E133R3P1) Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:*before 9.1.0.135\(c00e133r3p1\)VulnerableHuawei
cpe:2.3:h:huawei:mate_20_pro:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.135\(c00e133r3p1\) Vulnerable ·Huawei
  • cpe:2.3:h:huawei:mate_20_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

  • Fix · CNA Mate 20 Pro Fixed in 9.1.0.135(C00E133R3P1)

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-5250
  2. 2026-10-03 Alias added: GHSA-35fq-rqch-cg5p

References

Advisory 1

  • TI-2020-00021 In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write… CVSS 3.1HIGH 8.8
  • TI-2019-06941 Cryptographic flaw in Bluetooth BR/EDR CVSS 3.1HIGH 8.1
  • TI-2020-07388 Buffer overflow in Huawei HONOR 20 PRO CVSS 3.1HIGH 7.8
  • TI-2020-07293 Improper privilege management in HUAWEI Mate 20 Pro CVSS 3.1HIGH 7.8
  • TI-2020-07385 HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro… CVSS 3.1MEDIUM 6.8
  • TI-2019-03732 Improper input validation in Huawei ALP-AL00B CVSS 3.1MEDIUM 5.3
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences