CVE-2018-7957

2018-07-3114:00:00

huawei

www.cve.org

AI Score

3.8

Confidence

High

EPSS

Percentile

12.6%

JSON

Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.

CNA Affected

[
  {
    "product": "Victoria-AL00",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Victoria-AL00 8.0.0.336a(C00)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20180704-01-smartphone-en