PT-2018-18363

CVE-2018-7993

·

Published

2018-07-31

·

Updated

2018-10-04

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: HUAWEI Mate 10 smartphones versions prior to ALP-AL00 8.1.0.311
Description: The issue is related to a use after free vulnerability on the mediaserver component. An attacker could trick the user into installing a malicious application, which causes the software to reference memory after it has been freed. This could potentially lead to the execution of arbitrary code.
Recommendations: For versions prior to ALP-AL00 8.1.0.311, update to version ALP-AL00 8.1.0.311 or later to resolve the issue. As a temporary workaround, consider restricting the installation of applications from untrusted sources to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾