CVE-2018-7957

CVE-2018-7957 affects Huawei Victoria-AL00 smartphones running 8.0.0.336a(C00). The root cause is an interface that does not verify authorization correctly, allowing an app with phone-state access to obtain the user’s location, i.e., information leakage with a LOCAL, low-impact exposure. The NVD ...