CVE-2018-7992

published 2018-07-31

CVE-2018-7992: Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00)…

Priority P4 19 medium 5.5 CVSS 3.0

AV L AC L PR N UI R S U C N I N A H

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a malicious application which would send crafted parameters to the driver. Successful exploit could cause a denial of service condition.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
huawei	mate_9_firmware	< 8.0.0.356\(c00\)	8.0.0.356\(c00\)
huawei	mate_9_pro_firmware	< 8.0.0.356\(c00\)	8.0.0.356\(c00\)
huawei	mediapad_m3_firmware	—	—
huawei	p10_plus_firmware	< 8.0.0.357\(c00\)	8.0.0.357\(c00\)

CVSS provenance

nvd v3.0 5.5 MEDIUM CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

nvd v2.0 4.3 MEDIUM AV:N/AC:M/Au:N/C:N/I:N/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119