TI-2019-03737 Aliases CVE-2019-5308 GHSA-7rx2-8574-5qv6

Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an…

LOW 12Published 2019-11-29 · Updated 2024-08-04

Key facts

Attack vector: Physical
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Mate 20 RS smartphones with versions earlier than 9.1.0.135(C786E133R3P1) have an improper authorization vulnerability. The software does not properly restrict certain operation in ADB mode, successful exploit could allow the attacker to switch to third desktop after a series of operation.

Why it matters now

EPSS 0.00209 11th percentileScored 2026-11-07

Fix Fixed Mate 20 RS: 9.1.0.135(C786E133R3P1)

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	Mate 20 RS	before 9.1.0.135(C786E133R3P1)	9.1.0.135(C786E133R3P1)	Patch available	CNA

Mate 20 RS Vendor— Affected before 9.1.0.135(C786E133R3P1) Fixed in 9.1.0.135(C786E133R3P1) Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:huawei:mate_20_rs_firmware::::::::	before 9.1.0.135\(c786e133r3p1\)	Vulnerable	Huawei
cpe:2.3:h:huawei:mate_20_rs:-:::::::*	not specified by NVD	Running on	Huawei

cpe:2.3:o:huawei:mate_20_rs_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.135\(c786e133r3p1\) Vulnerable ·Huawei
cpe:2.3:h:huawei:mate_20_rs:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

Fix · CNA Mate 20 RS Fixed in 9.1.0.135(C786E133R3P1)

Timeline

2026-10-02 Threatist record created from CVE-2019-5308
2026-10-03 Alias added: GHSA-7rx2-8574-5qv6

References

Advisory 1

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20191127-01-smartphone-en

TI-2020-07385 HUAWEI Mate 20 versions Versions earlier than 10.1.0.160(C00E160R3P8);HUAWEI Mate 20 Pro… CVSS 3.1MEDIUM 6.8
TI-2019-03732 Improper input validation in Huawei ALP-AL00B CVSS 3.1MEDIUM 5.3
TI-2019-03731 Improper input validation in Huawei Sydney-L21 CVSS 3.1MEDIUM 5.3
TI-2020-01810 Huawei mobile phones Ever-L29B versions earlier than 10.0.0.180(C185E6R3P3), earlier than… CVSS 3.1MEDIUM 4.6
TI-2020-07393 Path traversal in HUAWEI Mate 20 CVSS 3.1LOW 2.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences