Vulnerabilities > CVE-2018-7993 - Use After Free vulnerability in Huawei Mate 10 Firmware

047910
CVSS 7.8 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
huawei
CWE-416
NVD
Published: 2018-07-31
Updated: 2018-10-04

Summary

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause execution of arbitrary code.

Vulnerable Configurations

Part Description Count
OS
Huawei
8
Hardware
Huawei
1

Common Weakness Enumeration (CWE)

References