CVE-2018-7957

Summary

Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.

Affected Software

VendorProductVersion RangeStatus
Huawei Technologies Co., Ltd.Victoria-AL00Victoria-AL00 8.0.0.336a(C00)affected

Weaknesses

  • information leakage

ADP Enrichment

CVE Program Container

Additional References

References