CVE-2018-7957

2018-07-3114:00:00

huawei

www.cve.org

3.8 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.

CNA Affected

[
  {
    "product": "Victoria-AL00",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "Victoria-AL00 8.0.0.336a(C00)"
      }
    ]
  }
]