CVE-2018-7938: Infoleak
P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can read some hardware serial number, which may cause sensitive information leak.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-7938?
CVE-2018-7938 is a vulnerability found in P10 Huawei smartphones with versions before Victoria-AL00AC00B217 that allows an attacker to read hardware serial numbers through a malicious application.
What is the severity of CVE-2018-7938?
CVE-2018-7938 has a severity value of 3.3, which is categorized as medium.
How does CVE-2018-7938 work?
CVE-2018-7938 works by tricking a user into installing a malicious application on their P10 Huawei smartphone, which then reads hardware serial numbers without proper permission validation.
Is my Huawei P10 affected by CVE-2018-7938?
Only P10 Huawei smartphones with versions before Victoria-AL00AC00B217 are affected by CVE-2018-7938.
How can I protect my Huawei P10 from CVE-2018-7938?
To protect your Huawei P10 from CVE-2018-7938, ensure that you have installed the Victoria-AL00AC00B217 version of the firmware.