CVE-2019-19412

Severity: medium (CVSS 4.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-08 · updated 2026-06-17

Description

Huawei smart phones have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker login the Talkback mode and can perform some operations to install a third-Party application. Affected products can be found in https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200115-01-frp-en.

Affected products

Huawei Alp-Al00B Firmware: before 9.0.0.181\(c00e87r2p20t8\) — fixed in 9.0.0.181\(c00e87r2p20t8\)
Huawei Technologies Co., Ltd. ALP-L09: before 9.0.0.201\(c432e4r1p9\) — fixed in 9.0.0.201\(c432e4r1p9\)
Huawei Alp-L29 Firmware: before 9.0.0.177\(c185e2r1p12t8\); before 9.0.0.195\(c636e2r1p12\) — fixed in 9.0.0.177\(c185e2r1p12t8\), 9.0.0.195\(c636e2r1p12\)
Huawei Technologies Co., Ltd. Anne-AL00: before 8.0.0.168\(c00\) — fixed in 8.0.0.168\(c00\)
Huawei Berkeley-Al20 Firmware: before 9.0.0.156\(c00e156r2p14t8\) — fixed in 9.0.0.156\(c00e156r2p14t8\)
Huawei Berkeley-L09 Firmware: before 8.0.0.172\(c432\); before 8.0.0.173\(c636\) — fixed in 8.0.0.172\(c432\), 8.0.0.173\(c636\)
Huawei Bla-Al00B Firmware: before 9.0.0.181\(c00e88r2p15t8\) — fixed in 9.0.0.181\(c00e88r2p15t8\)
Huawei Bla-L09C Firmware: before 9.0.0.177\(c185e2r1p13t8\); before 9.0.0.206\(c432e4r1p11\) — fixed in 9.0.0.177\(c185e2r1p13t8\), 9.0.0.206\(c432e4r1p11\)
Huawei Bla-L29C Firmware: before 9.0.0.179\(c576e2r1p7t8\); before 9.0.0.194\(c185e2r1p13\); before 9.0.0.206\(c432e4r1p11\); before 9.0.0.210\(c635e4r1p13\) — fixed in 9.0.0.179\(c576e2r1p7t8\), 9.0.0.194\(c185e2r1p13\), 9.0.0.206\(c432e4r1p11\), 9.0.0.210\(c635e4r1p13\)
Huawei Emily-L29C: before 9.0.0.159\(c185e2r1p12t8\); before 9.0.0.159\(c461e2r1p11t8\); before 9.0.0.160\(c432e7r1p11t8\); before 9.0.0.165\(c605e2r1p12\); before 9.0.0.168\(c636e7r1p13t8\); before 9.0.0.168\(c782e3r1p11t8\) — fixed in 9.0.0.159\(c185e2r1p12t8\), 9.0.0.159\(c461e2r1p11t8\), 9.0.0.160\(c432e7r1p11t8\), 9.0.0.165\(c605e2r1p12\), 9.0.0.168\(c636e7r1p13t8\), 9.0.0.168\(c782e3r1p11t8\)
Huawei Figo-L03 Firmware: before 9.1.0.130\(c605e6r1p5t8\) — fixed in 9.1.0.130\(c605e6r1p5t8\)
Huawei Figo-L21 Firmware: before 9.1.0.130\(c185e6r1p5t8\); before 9.1.0.130\(c635e6r1p5t8\) — fixed in 9.1.0.130\(c185e6r1p5t8\), 9.1.0.130\(c635e6r1p5t8\)
Huawei Figo-L23 Firmware: before 9.1.0.130\(c605e6r1p5t8\) — fixed in 9.1.0.130\(c605e6r1p5t8\)
Huawei Figo-L31 Firmware: before 9.1.0.130\(c432e8r1p5t8\) — fixed in 9.1.0.130\(c432e8r1p5t8\)
Huawei Florida-L03 Firmware: before 9.1.0.121\(c605e5r1p1t8\) — fixed in 9.1.0.121\(c605e5r1p1t8\)
Huawei Florida-L21 Firmware: before 8.0.0.129\(c605\); before 8.0.0.131\(c432\); before 8.0.0.132\(c185\) — fixed in 8.0.0.129\(c605\), 8.0.0.131\(c432\), 8.0.0.132\(c185\)
Huawei Florida-L22 Firmware: before 8.0.0.132\(c636\) — fixed in 8.0.0.132\(c636\)
Huawei Florida-L23 Firmware: before 8.0.0.144\(c605\) — fixed in 8.0.0.144\(c605\)
Huawei Honor View 10 Firmware: before 9.0.0.202\(c567e6r1p12t8\) — fixed in 9.0.0.202\(c567e6r1p12t8\)
Huawei Leland-AL00A: before 8.0.0.182\(c00\) — fixed in 8.0.0.182\(c00\)
Huawei Leland-L21A Firmware: before 8.0.0.135\(c185\); before 9.1.0.118\(c636e4r1p1t8\) — fixed in 8.0.0.135\(c185\), 9.1.0.118\(c636e4r1p1t8\)
Huawei Leland-L22A Firmware: before 9.1.0.118\(c636e4r1p1t8\) — fixed in 9.1.0.118\(c636e4r1p1t8\)
Huawei Leland-L22C Firmware: before 9.1.0.118\(c636e4r1p1t8\) — fixed in 9.1.0.118\(c636e4r1p1t8\)
Huawei Leland-L31A Firmware: before 8.0.0.139\(c432\) — fixed in 8.0.0.139\(c432\)
Huawei Nova 3E Firmware: before 8.0.0.147\(c461\); before 8.0.0.148\(zafc185\); before 8.0.0.160\(c185\); before 8.0.0.160\(c605\); before 8.0.0.168\(c432\); before 8.0.0.172\(c636\) — fixed in 8.0.0.147\(c461\), 8.0.0.148\(zafc185\), 8.0.0.160\(c185\), 8.0.0.160\(c605\), 8.0.0.168\(c432\), 8.0.0.172\(c636\)
Huawei P20 Lite Firmware: before 8.0.0.148\(c635\); before 8.0.0.155\(c185\); before 8.0.0.155\(c605\); before 8.0.0.156\(c605\); before 8.0.0.157\(c432\); before 8.0.0.147\(c461\) — fixed in 8.0.0.147\(c461\), 8.0.0.148\(c635\), 8.0.0.148\(zafc185\), 8.0.0.155\(c185\), 8.0.0.155\(c605\), 8.0.0.156\(c605\)
Huawei P Smart Firmware: before 9.1.0.130\(c185e6r1p5t8\); before 9.1.0.130\(c605e6r1p5t8\); before 9.1.0.124\(c636e6r1p5t8\) — fixed in 9.1.0.124\(c636e6r1p5t8\), 9.1.0.130\(c185e6r1p5t8\), 9.1.0.130\(c605e6r1p5t8\)
Huawei Y7S Firmware: before 9.1.0.124\(c636e6r1p5t8\) — fixed in 9.1.0.124\(c636e6r1p5t8\)

How to fix

Upgrade to a fixed version: Huawei Alp-Al00B Firmware 9.0.0.181\(c00e87r2p20t8\); Huawei Technologies Co., Ltd. ALP-L09 9.0.0.201\(c432e4r1p9\); Huawei Alp-L29 Firmware 9.0.0.177\(c185e2r1p12t8\), 9.0.0.195\(c636e2r1p12\); Huawei Technologies Co., Ltd. Anne-AL00 8.0.0.168\(c00\); Huawei Berkeley-Al20 Firmware 9.0.0.156\(c00e156r2p14t8\); Huawei Berkeley-L09 Firmware 8.0.0.172\(c432\), 8.0.0.173\(c636\); Huawei Bla-Al00B Firmware 9.0.0.181\(c00e88r2p15t8\); Huawei Bla-L09C Firmware 9.0.0.177\(c185e2r1p13t8\), 9.0.0.206\(c432e4r1p11\); Huawei Bla-L29C Firmware 9.0.0.179\(c576e2r1p7t8\), 9.0.0.194\(c185e2r1p13\), 9.0.0.206\(c432e4r1p11\), 9.0.0.210\(c635e4r1p13\); Huawei Emily-L29C 9.0.0.159\(c185e2r1p12t8\), 9.0.0.159\(c461e2r1p11t8\), 9.0.0.160\(c432e7r1p11t8\), 9.0.0.165\(c605e2r1p12\); Huawei Figo-L03 Firmware 9.1.0.130\(c605e6r1p5t8\); Huawei Figo-L21 Firmware 9.1.0.130\(c185e6r1p5t8\), 9.1.0.130\(c635e6r1p5t8\). Check the vendor advisory for mitigations.

References

Get alerted when CVE-2019-19412 or the next vulnerability affects your stack