Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability.
Priority LOW 21Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.
Why it matters now
EPSS 0.00214 11th percentileScored 2026-11-07
Fix Fixed ALP-AL00B (Huawei): 9.0.0.181(C00E87R2P20T8)ALP-L09 (Huawei): 9.0.0.201(C432E4R1P9)+26 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | ALP-AL00B | before 9.0.0.181(C00E87R2P20T8) | 9.0.0.181(C00E87R2P20T8) | Patch available | CNA |
| Huawei | ALP-L09 | before 9.0.0.201(C432E4R1P9) | 9.0.0.201(C432E4R1P9) | Patch available | CNA |
| Huawei | ALP-L29 | before 9.0.0.177(C185E2R1P12T8); before 9.0.0.195(C636E2R1P12) | 9.0.0.177(C185E2R1P12T8), 9.0.0.195(C636E2R1P12) | Patch available | CNA |
| Huawei | Anne-AL00 | before 8.0.0.168(C00) | 8.0.0.168(C00) | Patch available | CNA |
| Huawei | BLA-AL00B | before 9.0.0.181(C00E88R2P15T8) | 9.0.0.181(C00E88R2P15T8) | Patch available | CNA |
| Huawei | BLA-L09C | before 9.0.0.177(C185E2R1P13T8); before 9.0.0.206(C432E4R1P11) | 9.0.0.177(C185E2R1P13T8), 9.0.0.206(C432E4R1P11) | Patch available | CNA |
| Huawei | BLA-L29C | before 9.0.0.179(C576E2R1P7T8); before 9.0.0.194(C185E2R1P13); before 9.0.0.206(C432E4R1P11); before 9.0.0.210(C635E4R1P13) | 9.0.0.179(C576E2R1P7T8), 9.0.0.194(C185E2R1P13), 9.0.0.206(C432E4R1P11), 9.0.0.210(C635E4R1P13) | Patch available | CNA |
| Huawei | Berkeley-AL20 | before 9.0.0.156(C00E156R2P14T8) | 9.0.0.156(C00E156R2P14T8) | Patch available | CNA |
| Huawei | Berkeley-L09 | before 8.0.0.172(C432); before 8.0.0.173(C636) | 8.0.0.172(C432), 8.0.0.173(C636) | Patch available | CNA |
| Huawei | Emily-L29C | before 9.0.0.159(C185E2R1P12T8); before 9.0.0.159(C461E2R1P11T8); before 9.0.0.160(C432E7R1P11T8); before 9.0.0.165(C605E2R1P12); before 9.0.0.168(C636E7R1P13T8); before 9.0.0.168(C782E3R1P11T8); before 9.0.0.196(C635E2R1P11T8) | 9.0.0.159(C185E2R1P12T8), 9.0.0.159(C461E2R1P11T8), 9.0.0.160(C432E7R1P11T8), 9.0.0.165(C605E2R1P12), 9.0.0.168(C636E7R1P13T8), 9.0.0.168(C782E3R1P11T8), 9.0.0.196(C635E2R1P11T8) | Patch available | CNA |
| Huawei | Figo-L03 | before 9.1.0.130(C605E6R1P5T8) | 9.1.0.130(C605E6R1P5T8) | Patch available | CNA |
| Huawei | Figo-L21 | before 9.1.0.130(C185E6R1P5T8); before 9.1.0.130(C635E6R1P5T8) | 9.1.0.130(C185E6R1P5T8), 9.1.0.130(C635E6R1P5T8) | Patch available | CNA |
| Huawei | Figo-L23 | before 9.1.0.130(C605E6R1P5T8) | 9.1.0.130(C605E6R1P5T8) | Patch available | CNA |
| Huawei | Figo-L31 | before 9.1.0.130(C432E8R1P5T8) | 9.1.0.130(C432E8R1P5T8) | Patch available | CNA |
| Huawei | Florida-L03 | before 9.1.0.121(C605E5R1P1T8) | 9.1.0.121(C605E5R1P1T8) | Patch available | CNA |
| Huawei | Florida-L21 | before 8.0.0.129(C605); before 8.0.0.131(C432); before 8.0.0.132(C185) | 8.0.0.129(C605), 8.0.0.131(C432), 8.0.0.132(C185) | Patch available | CNA |
| Huawei | Florida-L22 | before 8.0.0.132(C636) | 8.0.0.132(C636) | Patch available | CNA |
| Huawei | Florida-L23 | before 8.0.0.144(C605) | 8.0.0.144(C605) | Patch available | CNA |
| Huawei | HUAWEI P smart | before 9.1.0.130(C185E6R1P5T8); before 9.1.0.130(C605E6R1P5T8) | 9.1.0.130(C185E6R1P5T8), 9.1.0.130(C605E6R1P5T8) | Patch available | CNA |
| Huawei | HUAWEI P smart,HUAWEI Y7s | before 9.1.0.124(C636E6R1P5T8) | 9.1.0.124(C636E6R1P5T8) | Patch available | CNA |
| Huawei | HUAWEI P20 lite | before 8.0.0.148(C635); before 8.0.0.155(C185); before 8.0.0.155(C605); before 8.0.0.156(C605); before 8.0.0.157(C432) | 8.0.0.148(C635), 8.0.0.155(C185), 8.0.0.155(C605), 8.0.0.156(C605), 8.0.0.157(C432) | Patch available | CNA |
| Huawei | HUAWEI nova 3e,HUAWEI P20 lite | before 8.0.0.147(C461); before 8.0.0.148(ZAFC185); before 8.0.0.160(C185); before 8.0.0.160(C605); before 8.0.0.168(C432); before 8.0.0.172(C636) | 8.0.0.147(C461), 8.0.0.148(ZAFC185), 8.0.0.160(C185), 8.0.0.160(C605), 8.0.0.168(C432), 8.0.0.172(C636) | Patch available | CNA |
| Huawei | Honor View 10 | before 9.0.0.202(C567E6R1P12T8) | 9.0.0.202(C567E6R1P12T8) | Patch available | CNA |
| Huawei | Leland-AL00A | before 8.0.0.182(C00) | 8.0.0.182(C00) | Patch available | CNA |
| Huawei | Leland-L21A | before 8.0.0.135(C185); before 9.1.0.118(C636E4R1P1T8) | 8.0.0.135(C185), 9.1.0.118(C636E4R1P1T8) | Patch available | CNA |
| Huawei | Leland-L22A | before 9.1.0.118(C636E4R1P1T8) | 9.1.0.118(C636E4R1P1T8) | Patch available | CNA |
| Huawei | Leland-L22C | before 9.1.0.118(C636E4R1P1T8) | 9.1.0.118(C636E4R1P1T8) | Patch available | CNA |
| Huawei | Leland-L31A | before 8.0.0.139(C432) | 8.0.0.139(C432) | Patch available | CNA |
- ALP-AL00B VendorHuawei Affected before 9.0.0.181(C00E87R2P20T8) Fixed in 9.0.0.181(C00E87R2P20T8) Patch available CNA
- ALP-L09 VendorHuawei Affected before 9.0.0.201(C432E4R1P9) Fixed in 9.0.0.201(C432E4R1P9) Patch available CNA
- ALP-L29 VendorHuawei Affected before 9.0.0.177(C185E2R1P12T8); before 9.0.0.195(C636E2R1P12) Fixed in 9.0.0.177(C185E2R1P12T8), 9.0.0.195(C636E2R1P12) Patch available CNA
- Anne-AL00 VendorHuawei Affected before 8.0.0.168(C00) Fixed in 8.0.0.168(C00) Patch available CNA
- BLA-AL00B VendorHuawei Affected before 9.0.0.181(C00E88R2P15T8) Fixed in 9.0.0.181(C00E88R2P15T8) Patch available CNA
- BLA-L09C VendorHuawei Affected before 9.0.0.177(C185E2R1P13T8); before 9.0.0.206(C432E4R1P11) Fixed in 9.0.0.177(C185E2R1P13T8), 9.0.0.206(C432E4R1P11) Patch available CNA
- BLA-L29C VendorHuawei Affected before 9.0.0.179(C576E2R1P7T8); before 9.0.0.194(C185E2R1P13); before 9.0.0.206(C432E4R1P11); before 9.0.0.210(C635E4R1P13) Fixed in 9.0.0.179(C576E2R1P7T8), 9.0.0.194(C185E2R1P13), 9.0.0.206(C432E4R1P11), 9.0.0.210(C635E4R1P13) Patch available CNA
- Berkeley-AL20 VendorHuawei Affected before 9.0.0.156(C00E156R2P14T8) Fixed in 9.0.0.156(C00E156R2P14T8) Patch available CNA
- Berkeley-L09 VendorHuawei Affected before 8.0.0.172(C432); before 8.0.0.173(C636) Fixed in 8.0.0.172(C432), 8.0.0.173(C636) Patch available CNA
- Emily-L29C VendorHuawei Affected before 9.0.0.159(C185E2R1P12T8); before 9.0.0.159(C461E2R1P11T8); before 9.0.0.160(C432E7R1P11T8); before 9.0.0.165(C605E2R1P12); before 9.0.0.168(C636E7R1P13T8); before 9.0.0.168(C782E3R1P11T8); before 9.0.0.196(C635E2R1P11T8) Fixed in 9.0.0.159(C185E2R1P12T8), 9.0.0.159(C461E2R1P11T8), 9.0.0.160(C432E7R1P11T8), 9.0.0.165(C605E2R1P12), 9.0.0.168(C636E7R1P13T8), 9.0.0.168(C782E3R1P11T8), 9.0.0.196(C635E2R1P11T8) Patch available CNA
- Figo-L03 VendorHuawei Affected before 9.1.0.130(C605E6R1P5T8) Fixed in 9.1.0.130(C605E6R1P5T8) Patch available CNA
- Figo-L21 VendorHuawei Affected before 9.1.0.130(C185E6R1P5T8); before 9.1.0.130(C635E6R1P5T8) Fixed in 9.1.0.130(C185E6R1P5T8), 9.1.0.130(C635E6R1P5T8) Patch available CNA
- Figo-L23 VendorHuawei Affected before 9.1.0.130(C605E6R1P5T8) Fixed in 9.1.0.130(C605E6R1P5T8) Patch available CNA
- Figo-L31 VendorHuawei Affected before 9.1.0.130(C432E8R1P5T8) Fixed in 9.1.0.130(C432E8R1P5T8) Patch available CNA
- Florida-L03 VendorHuawei Affected before 9.1.0.121(C605E5R1P1T8) Fixed in 9.1.0.121(C605E5R1P1T8) Patch available CNA
- Florida-L21 VendorHuawei Affected before 8.0.0.129(C605); before 8.0.0.131(C432); before 8.0.0.132(C185) Fixed in 8.0.0.129(C605), 8.0.0.131(C432), 8.0.0.132(C185) Patch available CNA
- Florida-L22 VendorHuawei Affected before 8.0.0.132(C636) Fixed in 8.0.0.132(C636) Patch available CNA
- Florida-L23 VendorHuawei Affected before 8.0.0.144(C605) Fixed in 8.0.0.144(C605) Patch available CNA
- HUAWEI P smart VendorHuawei Affected before 9.1.0.130(C185E6R1P5T8); before 9.1.0.130(C605E6R1P5T8) Fixed in 9.1.0.130(C185E6R1P5T8), 9.1.0.130(C605E6R1P5T8) Patch available CNA
- HUAWEI P smart,HUAWEI Y7s VendorHuawei Affected before 9.1.0.124(C636E6R1P5T8) Fixed in 9.1.0.124(C636E6R1P5T8) Patch available CNA
- HUAWEI P20 lite VendorHuawei Affected before 8.0.0.148(C635); before 8.0.0.155(C185); before 8.0.0.155(C605); before 8.0.0.156(C605); before 8.0.0.157(C432) Fixed in 8.0.0.148(C635), 8.0.0.155(C185), 8.0.0.155(C605), 8.0.0.156(C605), 8.0.0.157(C432) Patch available CNA
- HUAWEI nova 3e,HUAWEI P20 lite VendorHuawei Affected before 8.0.0.147(C461); before 8.0.0.148(ZAFC185); before 8.0.0.160(C185); before 8.0.0.160(C605); before 8.0.0.168(C432); before 8.0.0.172(C636) Fixed in 8.0.0.147(C461), 8.0.0.148(ZAFC185), 8.0.0.160(C185), 8.0.0.160(C605), 8.0.0.168(C432), 8.0.0.172(C636) Patch available CNA
- Honor View 10 VendorHuawei Affected before 9.0.0.202(C567E6R1P12T8) Fixed in 9.0.0.202(C567E6R1P12T8) Patch available CNA
- Leland-AL00A VendorHuawei Affected before 8.0.0.182(C00) Fixed in 8.0.0.182(C00) Patch available CNA
- Leland-L21A VendorHuawei Affected before 8.0.0.135(C185); before 9.1.0.118(C636E4R1P1T8) Fixed in 8.0.0.135(C185), 9.1.0.118(C636E4R1P1T8) Patch available CNA
- Leland-L22A VendorHuawei Affected before 9.1.0.118(C636E4R1P1T8) Fixed in 9.1.0.118(C636E4R1P1T8) Patch available CNA
- Leland-L22C VendorHuawei Affected before 9.1.0.118(C636E4R1P1T8) Fixed in 9.1.0.118(C636E4R1P1T8) Patch available CNA
- Leland-L31A VendorHuawei Affected before 8.0.0.139(C432) Fixed in 8.0.0.139(C432) Patch available CNA
CPE configurations NVD · 68
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:alp-al00b_firmware:*:*:*:*:*:*:*:* | before 9.0.0.181\(c00e87r2p20t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:alp-al00b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:alp-l09_firmware:*:*:*:*:*:*:*:* | before 9.0.0.201\(c432e4r1p9\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:alp-l09:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:alp-l29_firmware:*:*:*:*:*:*:*:* | before 9.0.0.177\(c185e2r1p12t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:alp-l29:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:alp-l29_firmware:*:*:*:*:*:*:*:* | before 9.0.0.195\(c636e2r1p12\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:anne-al00_firmware:*:*:*:*:*:*:*:* | before 8.0.0.168\(c00\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:anne-al00:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:bla-al00b_firmware:*:*:*:*:*:*:*:* | before 9.0.0.181\(c00e88r2p15t8\) | Vulnerable | Huawei |
- cpe:2.3:o:huawei:alp-al00b_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.181\(c00e87r2p20t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:alp-al00b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:alp-l09_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.201\(c432e4r1p9\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:alp-l09:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:alp-l29_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.177\(c185e2r1p12t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:alp-l29:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:alp-l29_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.195\(c636e2r1p12\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:anne-al00_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.168\(c00\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:anne-al00:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:bla-al00b_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.181\(c00e88r2p15t8\) Vulnerable ·Huawei
Show 58 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:huawei:bla-al00b:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:bla-l09c_firmware:*:*:*:*:*:*:*:* | before 9.0.0.177\(c185e2r1p13t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:bla-l09c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:bla-l09c_firmware:*:*:*:*:*:*:*:* | before 9.0.0.206\(c432e4r1p11\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:* | before 9.0.0.179\(c576e2r1p7t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:bla-l29c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:* | before 9.0.0.194\(c185e2r1p13\); before 9.0.0.206\(c432e4r1p11\); before 9.0.0.210\(c635e4r1p13\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:berkeley-al20_firmware:*:*:*:*:*:*:*:* | before 9.0.0.156\(c00e156r2p14t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:berkeley-al20:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:* | before 8.0.0.172\(c432\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:berkeley-l09:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:* | before 8.0.0.173\(c636\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:emily-l29c_firmware:*:*:*:*:*:*:*:* | before 9.0.0.159\(c185e2r1p12t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:emily-l29c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:emily-l29c_firmware:*:*:*:*:*:*:*:* | before 9.0.0.159\(c461e2r1p11t8\); before 9.0.0.160\(c432e7r1p11t8\); before 9.0.0.165\(c605e2r1p12\); before 9.0.0.168\(c636e7r1p13t8\); before 9.0.0.168\(c782e3r1p11t8\); before 9.0.0.196\(c635e2r1p11t8\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:figo-l03_firmware:*:*:*:*:*:*:*:* | before 9.1.0.130\(c605e6r1p5t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:figo-l03:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:figo-l21_firmware:*:*:*:*:*:*:*:* | before 9.1.0.130\(c185e6r1p5t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:figo-l21:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:figo-l21_firmware:*:*:*:*:*:*:*:* | before 9.1.0.130\(c635e6r1p5t8\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:figo-l23_firmware:*:*:*:*:*:*:*:* | before 9.1.0.130\(c605e6r1p5t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:figo-l23:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:figo-l31_firmware:*:*:*:*:*:*:*:* | before 9.1.0.130\(c432e8r1p5t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:figo-l31:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:florida-l03_firmware:*:*:*:*:*:*:*:* | before 9.1.0.121\(c605e5r1p1t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:florida-l03:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:florida-l21_firmware:*:*:*:*:*:*:*:* | before 8.0.0.129\(c605\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:florida-l21:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:florida-l21_firmware:*:*:*:*:*:*:*:* | before 8.0.0.131\(c432\); before 8.0.0.132\(c185\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:florida-l22_firmware:*:*:*:*:*:*:*:* | before 8.0.0.132\(c636\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:florida-l22:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:florida-l23_firmware:*:*:*:*:*:*:*:* | before 8.0.0.144\(c605\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:florida-l23:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:p_smart_firmware:*:*:*:*:*:*:*:* | before 9.1.0.130\(c185e6r1p5t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:p_smart:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:p_smart_firmware:*:*:*:*:*:*:*:* | before 9.1.0.130\(c605e6r1p5t8\); before 9.1.0.124\(c636e6r1p5t8\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:y7s_firmware:*:*:*:*:*:*:*:* | before 9.1.0.124\(c636e6r1p5t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:y7s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:p20_lite_firmware:*:*:*:*:*:*:*:* | before 8.0.0.148\(c635\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:p20_lite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:p20_lite_firmware:*:*:*:*:*:*:*:* | before 8.0.0.155\(c185\); before 8.0.0.155\(c605\); before 8.0.0.156\(c605\); before 8.0.0.157\(c432\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:nova_3e_firmware:*:*:*:*:*:*:*:* | before 8.0.0.147\(c461\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:nova_3e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:nova_3e_firmware:*:*:*:*:*:*:*:* | before 8.0.0.148\(zafc185\); before 8.0.0.160\(c185\); before 8.0.0.160\(c605\); before 8.0.0.168\(c432\); before 8.0.0.172\(c636\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:p20_lite_firmware:*:*:*:*:*:*:*:* | before 8.0.0.147\(c461\); before 8.0.0.148\(zafc185\); before 8.0.0.160\(c185\); before 8.0.0.160\(c605\); before 8.0.0.168\(c432\); before 8.0.0.172\(c636\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:honor_view_10_firmware:*:*:*:*:*:*:*:* | before 9.0.0.202\(c567e6r1p12t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:honor_view_10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:leland-al00a_firmware:*:*:*:*:*:*:*:* | before 8.0.0.182\(c00\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:leland-al00a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:leland-l21a_firmware:*:*:*:*:*:*:*:* | before 8.0.0.135\(c185\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:leland-l21a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:leland-l21a_firmware:*:*:*:*:*:*:*:* | before 9.1.0.118\(c636e4r1p1t8\) | Vulnerable | Huawei |
| cpe:2.3:o:huawei:leland-l22a_firmware:*:*:*:*:*:*:*:* | before 9.1.0.118\(c636e4r1p1t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:leland-l22a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:leland-l22c_firmware:*:*:*:*:*:*:*:* | before 9.1.0.118\(c636e4r1p1t8\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:leland-l22c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:leland-l31a_firmware:*:*:*:*:*:*:*:* | before 8.0.0.139\(c432\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:leland-l31a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:h:huawei:bla-al00b:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:bla-l09c_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.177\(c185e2r1p13t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:bla-l09c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:bla-l09c_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.206\(c432e4r1p11\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.179\(c576e2r1p7t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:bla-l29c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:bla-l29c_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.194\(c185e2r1p13\); before 9.0.0.206\(c432e4r1p11\); before 9.0.0.210\(c635e4r1p13\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:berkeley-al20_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.156\(c00e156r2p14t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:berkeley-al20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.172\(c432\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:berkeley-l09:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:berkeley-l09_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.173\(c636\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:emily-l29c_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.159\(c185e2r1p12t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:emily-l29c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:emily-l29c_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.159\(c461e2r1p11t8\); before 9.0.0.160\(c432e7r1p11t8\); before 9.0.0.165\(c605e2r1p12\); before 9.0.0.168\(c636e7r1p13t8\); before 9.0.0.168\(c782e3r1p11t8\); before 9.0.0.196\(c635e2r1p11t8\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:figo-l03_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.130\(c605e6r1p5t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:figo-l03:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:figo-l21_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.130\(c185e6r1p5t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:figo-l21:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:figo-l21_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.130\(c635e6r1p5t8\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:figo-l23_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.130\(c605e6r1p5t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:figo-l23:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:figo-l31_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.130\(c432e8r1p5t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:figo-l31:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:florida-l03_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.121\(c605e5r1p1t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:florida-l03:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:florida-l21_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.129\(c605\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:florida-l21:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:florida-l21_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.131\(c432\); before 8.0.0.132\(c185\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:florida-l22_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.132\(c636\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:florida-l22:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:florida-l23_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.144\(c605\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:florida-l23:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:p_smart_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.130\(c185e6r1p5t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:p_smart:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:p_smart_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.130\(c605e6r1p5t8\); before 9.1.0.124\(c636e6r1p5t8\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:y7s_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.124\(c636e6r1p5t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:y7s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:p20_lite_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.148\(c635\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:p20_lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:p20_lite_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.155\(c185\); before 8.0.0.155\(c605\); before 8.0.0.156\(c605\); before 8.0.0.157\(c432\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:nova_3e_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.147\(c461\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:nova_3e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:nova_3e_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.148\(zafc185\); before 8.0.0.160\(c185\); before 8.0.0.160\(c605\); before 8.0.0.168\(c432\); before 8.0.0.172\(c636\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:p20_lite_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.147\(c461\); before 8.0.0.148\(zafc185\); before 8.0.0.160\(c185\); before 8.0.0.160\(c605\); before 8.0.0.168\(c432\); before 8.0.0.172\(c636\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:honor_view_10_firmware:*:*:*:*:*:*:*:* Versions before 9.0.0.202\(c567e6r1p12t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:honor_view_10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:leland-al00a_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.182\(c00\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:leland-al00a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:leland-l21a_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.135\(c185\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:leland-l21a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:leland-l21a_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.118\(c636e4r1p1t8\) Vulnerable ·Huawei
- cpe:2.3:o:huawei:leland-l22a_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.118\(c636e4r1p1t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:leland-l22a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:leland-l22c_firmware:*:*:*:*:*:*:*:* Versions before 9.1.0.118\(c636e4r1p1t8\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:leland-l22c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:leland-l31a_firmware:*:*:*:*:*:*:*:* Versions before 8.0.0.139\(c432\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:leland-l31a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
- Fix · CNA ALP-AL00B (Huawei) Fixed in 9.0.0.181(C00E87R2P20T8)
- Fix · CNA ALP-L09 (Huawei) Fixed in 9.0.0.201(C432E4R1P9)
- Fix · CNA ALP-L29 (Huawei) Fixed in 9.0.0.177(C185E2R1P12T8), 9.0.0.195(C636E2R1P12)
- Fix · CNA Anne-AL00 (Huawei) Fixed in 8.0.0.168(C00)
- Fix · CNA BLA-AL00B (Huawei) Fixed in 9.0.0.181(C00E88R2P15T8)
- Fix · CNA BLA-L09C (Huawei) Fixed in 9.0.0.177(C185E2R1P13T8), 9.0.0.206(C432E4R1P11)
- Fix · CNA BLA-L29C (Huawei) Fixed in 9.0.0.179(C576E2R1P7T8), 9.0.0.194(C185E2R1P13), 9.0.0.206(C432E4R1P11), 9.0.0.210(C635E4R1P13)
- Fix · CNA Berkeley-AL20 (Huawei) Fixed in 9.0.0.156(C00E156R2P14T8)
- Fix · CNA Berkeley-L09 (Huawei) Fixed in 8.0.0.172(C432), 8.0.0.173(C636)
- Fix · CNA Emily-L29C (Huawei) Fixed in 9.0.0.159(C185E2R1P12T8), 9.0.0.159(C461E2R1P11T8), 9.0.0.160(C432E7R1P11T8), 9.0.0.165(C605E2R1P12), 9.0.0.168(C636E7R1P13T8), 9.0.0.168(C782E3R1P11T8), 9.0.0.196(C635E2R1P11T8)
- Fix · CNA Figo-L03 (Huawei) Fixed in 9.1.0.130(C605E6R1P5T8)
- Fix · CNA Figo-L21 (Huawei) Fixed in 9.1.0.130(C185E6R1P5T8), 9.1.0.130(C635E6R1P5T8)
- Fix · CNA Figo-L23 (Huawei) Fixed in 9.1.0.130(C605E6R1P5T8)
- Fix · CNA Figo-L31 (Huawei) Fixed in 9.1.0.130(C432E8R1P5T8)
- Fix · CNA Florida-L03 (Huawei) Fixed in 9.1.0.121(C605E5R1P1T8)
- Fix · CNA Florida-L21 (Huawei) Fixed in 8.0.0.129(C605), 8.0.0.131(C432), 8.0.0.132(C185)
- Fix · CNA Florida-L22 (Huawei) Fixed in 8.0.0.132(C636)
- Fix · CNA Florida-L23 (Huawei) Fixed in 8.0.0.144(C605)
- Fix · CNA HUAWEI P smart (Huawei) Fixed in 9.1.0.130(C185E6R1P5T8), 9.1.0.130(C605E6R1P5T8)
- Fix · CNA HUAWEI P smart,HUAWEI Y7s (Huawei) Fixed in 9.1.0.124(C636E6R1P5T8)
- Fix · CNA HUAWEI P20 lite (Huawei) Fixed in 8.0.0.148(C635), 8.0.0.155(C185), 8.0.0.155(C605), 8.0.0.156(C605), 8.0.0.157(C432)
- Fix · CNA HUAWEI nova 3e,HUAWEI P20 lite (Huawei) Fixed in 8.0.0.147(C461), 8.0.0.148(ZAFC185), 8.0.0.160(C185), 8.0.0.160(C605), 8.0.0.168(C432), 8.0.0.172(C636)
- Fix · CNA Honor View 10 (Huawei) Fixed in 9.0.0.202(C567E6R1P12T8)
- Fix · CNA Leland-AL00A (Huawei) Fixed in 8.0.0.182(C00)
- Fix · CNA Leland-L21A (Huawei) Fixed in 8.0.0.135(C185), 9.1.0.118(C636E4R1P1T8)
- Fix · CNA Leland-L22A (Huawei) Fixed in 9.1.0.118(C636E4R1P1T8)
- Fix · CNA Leland-L22C (Huawei) Fixed in 9.1.0.118(C636E4R1P1T8)
- Fix · CNA Leland-L31A (Huawei) Fixed in 8.0.0.139(C432)
Timeline
- 2026-10-02 Threatist record created from CVE-2019-19412
- 2026-10-03 Alias added: GHSA-gvv5-wgp2-xf56
References
More Huawei Alp-al00b Firmware vulnerabilities
- TI-2019-01829 Use after free in Android KEVCVSS 3.1HIGH 7.8
- TI-2019-06941 Cryptographic flaw in Bluetooth BR/EDR CVSS 3.1HIGH 8.1
- TI-2018-05725 Improper authentication in Huawei ALP-AL00B, ALP-TL00B, BLA-AL00B, BLA-L09C, BLA-L29C CVSS 3.0MEDIUM 6.8
- TI-2019-03669 NULL pointer dereference in Harry-AL00C, Harry-AL00C-PRELOAD, Harry-AL10B… CVSS 3.1MEDIUM 5.3
- TI-2019-03732 Improper input validation in Huawei ALP-AL00B CVSS 3.1MEDIUM 5.3
- TI-2019-03731 Improper input validation in Huawei Sydney-L21 CVSS 3.1MEDIUM 5.3
Sources
- CVE-2019-19412 · CVE Program
- CVE-2019-19412 · NVD
- FIRST EPSS
- GHSA-gvv5-wgp2-xf56 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences