CVE:CVE-2019-5251
CNNVD:CNNVD-201912-175
Huawei Mate20等都是中国华为（Huawei）公司的一款智能手机。
多款Huawei产品存在路径遍历漏洞，该漏洞源于系统对来自某应用程序的路径名没有进行充分地校验。攻击者可通过诱使用户安装、备份并还原一个恶意应用程序利用该漏洞泄露信息。以下产品及版本受到影响：Huawei Honor V10 9.1.0.333(C00E333R2P1T8)之前版本；P30 9.1.0.226(C00E220R2P1)之前版本；畅享7S 9.1.0.130(C00E115R2P8T8)之前版本；Mate 20 9.1.0.139(C00E133R3P1)之前版本；Honor 9 Lite 9.1.0.130(C00E112R2P10T8)之前版本，9.1.0.143(C636E5R1P5T8)之前版本；Honor 9i 9.1.0.120(C00E113R1P6T8)之前版本；M6 9.1.1.150(C00E150R1P150)之前版本；P30 Pro 9.1.0.226(C00E210R2P1)之前版本；Honor 20s 9.1.1.132(C00E131R6P1)之前版本；Honor 20 PRO 9.1.0.172(C432E2R5P1)之前版本；Mate 20 Pro 10.0.0.180(C10E7R2P4)之前版本，10.0.0.180(C185E7R2P4)之前版本，10.0.0.181(C432E7R1P5)之前版本，10.0.0.187(C635E3R1P5)之前版本；Mate 20 X 10.0.0.188(C00E74R2P8)之前版本；P smart 9.1.0.148(ZAFC185E6R1P5T8)之前版本；P20 lite 9.1.0.246(C185E4R1P8T8)之前版本，9.1.0.246(C432E6R1P7T8)之前版本，9.1.0.246(C605E4R1P3T8)之前版本；nova 2s 9.1.0.210(C00E110R2P9T8)之前版本。
solution:Upgrade huawei honor_v10_firmware to a higher version than 9.1.0.333\(c00e333r2p1t8\,and avoid the version (,9.1.0.333\(c00e333r2p1t8\)); Upgrade huawei p30_firmware to a higher version than 9.1.0.226\(c00e220r2p1\,and avoid the version (,9.1.0.226\(c00e220r2p1\)); Upgrade huawei enjoy_7s_firmware to a higher version than 9.1.0.130\(c00e115r2p8t8\,and avoid the version (,9.1.0.130\(c00e115r2p8t8\)); Upgrade huawei mate_20_firmware to a higher version than 9.1.0.139\(c00e133r3p1\,and avoid the version (,9.1.0.139\(c00e133r3p1\)); Upgrade huawei honor_9_lite_firmware to a higher version than 9.1.0.143\(c636e5r1p5t8\,9.1.0.130\(c00e112r2p10t8\,and avoid the version (,9.1.0.143\(c636e5r1p5t8\)),(,9.1.0.130\(c00e112r2p10t8\)); Upgrade huawei honor_9i_firmware to a higher version than 9.1.0.120\(c00e113r1p6t8\,and avoid the version (,9.1.0.120\(c00e113r1p6t8\)); Upgrade huawei m6_firmware to a higher version than 9.1.1.150\(c00e150r1p150\,and avoid the version (,9.1.1.150\(c00e150r1p150\)); Upgrade huawei p30_pro_firmware to a higher version than 9.1.0.226\(c00e210r2p1\,and avoid the version (,9.1.0.226\(c00e210r2p1\)); Upgrade huawei honor_20s_firmware to a higher version than 9.1.1.132\(c00e131r6p1\,and avoid the version (,9.1.1.132\(c00e131r6p1\))