Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an improper access…
Priority LOW 34Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Huawei Share function in P30 9.1.0.193(C00E190R2P1) smartphone has an improper access control vulnerability. The function incorrectly controls certain access messages, attackers can simulate a sender to steal P2P network information. Successful exploit may cause information leakage.
Why it matters now
EPSS 0.00764 55th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | P30 | 9.1.0.193(C00E190R2P1) | — | No fix listed | CNA |
- P30 VendorHuawei Affected 9.1.0.193(C00E190R2P1) Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-5265
- 2026-10-03 Alias added: GHSA-h43f-65rj-8fvg
References
More Huawei P30 Firmware vulnerabilities
- TI-2020-00021 In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write… CVSS 3.1HIGH 8.8
- TI-2019-06941 Cryptographic flaw in Bluetooth BR/EDR CVSS 3.1HIGH 8.1
- TI-2020-07404 Use after free in HUAWEI Mate 30;HUAWEI P30 CVSS 3.1HIGH 7.8
- TI-2020-07388 Buffer overflow in Huawei HONOR 20 PRO CVSS 3.1HIGH 7.8
- TI-2019-03717 Integer overflow in P30 CVSS 3.1HIGH 7.8
- TI-2019-03716 Integer overflow in P30 CVSS 3.1HIGH 7.8
Sources
- CVE-2019-5265 · CVE Program
- CVE-2019-5265 · NVD
- FIRST EPSS
- GHSA-h43f-65rj-8fvg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences