PT-2018-18363
CVE-2018-7993
·
Published
2018-07-31
·
Updated
2018-10-04
Description by
CVSS 2.0
9.3
HighMetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
HUAWEI Mate 10 smartphones versions prior to ALP-AL00 8.1.0.311
Description:
The issue is related to a use after free vulnerability on the mediaserver component. An attacker could trick the user into installing a malicious application, which causes the software to reference memory after it has been freed. This could potentially lead to the execution of arbitrary code.
Recommendations:
For versions prior to ALP-AL00 8.1.0.311, update to version ALP-AL00 8.1.0.311 or later to resolve the issue. As a temporary workaround, consider restricting the installation of applications from untrusted sources to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾