CVE-2018-7934

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users make specific screen gestures.

Score

CVSS 3.0 5.5 Medium

Status

Modified - psirt@huawei.com

Published

2018-07-31

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Mate 10 Pro Firmware (Huawei)
• Mate 10 Pro (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180705-01-smartphone-en