CVE-2018-7934

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 78.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Mate 10 PRO FirmwareHuawei Technologies Co., Ltd. Mate 10 PRO
Timeline
PublishedJul 31
Latest updateMay 14

Description

Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users make specific screen gestures.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/mate_10_pro_firmware< bla-l29_8.0.0.145\(c432\)
▶CVEListV5huawei_technologies_co.,_ltd./mate_10_proThe versions before BLA-L29 8.0.0.145(C432)

🔴Vulnerability Details

2
GHSA
GHSA-h9hj-45x9-ffg3: Some Huawei mobile phone with the versions before BLA-L29 8↗2022-05-14
▶
CVEList
CVE-2018-7934: Some Huawei mobile phone with the versions before BLA-L29 8↗2018-07-31
▶
CVE-2018-7934 (MEDIUM CVSS 5.5) | Some Huawei mobile phone with the v | cvebase.io