CVE-2018-7993: Use After Free

Q: What is the severity of CVE-2018-7993?

The severity of CVE-2018-7993 is critical with a CVSS score of 7.8.

Q: What is the vulnerability in CVE-2018-7993?

CVE-2018-7993 is a use after free vulnerability in the mediaserver component of HUAWEI Mate 10 smartphones.

Q: How can an attacker exploit CVE-2018-7993?

An attacker can exploit CVE-2018-7993 by tricking the user into installing a malicious application that causes the software to reference memory after it has been freed.

Q: How can I fix CVE-2018-7993?

To fix CVE-2018-7993, users of HUAWEI Mate 10 smartphones should update to version ALP-AL00 8.1.0.311 or later.

Published Jul 31, 2018

Updated

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause execution of arbitrary code.

Affected Software

2 affected components

huawei Mate 10 Firmware<alp-al00_8.1.0.311

huawei Mate 10

Event History

Jul 31, 2018

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-7993?

The severity of CVE-2018-7993 is critical with a CVSS score of 7.8.

Which smartphones are affected by CVE-2018-7993?

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 are affected by CVE-2018-7993.

What is the vulnerability in CVE-2018-7993?

CVE-2018-7993 is a use after free vulnerability in the mediaserver component of HUAWEI Mate 10 smartphones.

How can an attacker exploit CVE-2018-7993?

An attacker can exploit CVE-2018-7993 by tricking the user into installing a malicious application that causes the software to reference memory after it has been freed.

How can I fix CVE-2018-7993?