CVE-2018-7993

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause execution of arbitrary code.

Score

CVSS 3.0 7.8 High

Status

Modified - psirt@huawei.com

Published

2018-07-31

Last modified

2024-08-05

Weaknesses

CWE-416

Affected products

• Mate 10 Firmware (Huawei)
• Huawei Mate 10 (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180711-01-smartphone-en