CVE-2018-7957

Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.

Score

CVSS 3.0 3.3 Low

Status

Modified - psirt@huawei.com

Published

2018-07-31

Last modified

2024-08-05

Weaknesses

CWE-863

Affected products

• Victoria-al00 Firmware (Huawei)
• Victoria-al00 (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180704-01-smartphone-en