CVE-2018-7992: Buffer Overflow
First published: Tue Jul 31 2018(Updated: )
Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a malicious application which would send crafted parameters to the driver. Successful exploit could cause a denial of service condition.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Mediapad M3 Firmware | =btv-w09c128b353custc128d001 | |
| Huawei MediaPad M3 | ||
| Huawei Mate 9 Pro Firmware | <8.0.0.356\(c00\) | |
| Huawei Mate 9 Pro | ||
| Huawei P10 Plus Firmware | <8.0.0.357\(c00\) | |
| Huawei P10 Plus | ||
| Huawei Mate 9 Firmware | <8.0.0.356\(c00\) | |
| Huawei Mate 9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2018-7992?
CVE-2018-7992 is a buffer overflow vulnerability in the Mdapt Driver of Huawei MediaPad M3, Mate 9 Pro, and P10 Plus devices.
What is the severity of CVE-2018-7992?
CVE-2018-7992 has a severity rating of 5.5 (medium).
Which devices are affected by CVE-2018-7992?
The Huawei MediaPad M3 (model BTV-W09C128B353CUSTC128D001), Mate 9 Pro (versions earlier than 8.0.0.356(C00)), and P10 Plus (versions earlier than 8.0.0.357(C00)) are affected by CVE-2018-7992.
How can an attacker exploit CVE-2018-7992?
An attacker could exploit CVE-2018-7992 by tricking the user to install malicious software, taking advantage of the buffer overflow vulnerability in the Mdapt Driver.
Is there a fix available for CVE-2018-7992?
To fix CVE-2018-7992, it is recommended to update the affected devices to the latest firmware version provided by Huawei.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei mediapad m3 firmware
- version/huawei mediapad m3 firmware/btv-w09c128b353custc128d001
- canonical/huawei mediapad m3
- canonical/huawei mate 9 pro firmware
- canonical/huawei mate 9 pro
- canonical/huawei p10 plus firmware
- canonical/huawei p10 plus
- canonical/huawei mate 9 firmware
- canonical/huawei mate 9