Vulnerability Description
Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users make specific screen gestures.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Mate 10 Pro Firmware | < bla-l29_8.0.0.145\(c432\) |
| Huawei | Mate 10 Pro | - |
Related Weaknesses (CWE)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180705-01-smartphVendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180705-01-smartphVendor Advisory
FAQ
What is CVE-2018-7934?
CVE-2018-7934 is a vulnerability with a CVSS score of 5.5 (MEDIUM). Some Huawei mobile phone with the versions before BLA-L29 8.0.0.145(C432) have a denial of service (DoS) vulnerability because they do not adapt to specific screen gestures. An attacker may trick user...
How severe is CVE-2018-7934?
CVE-2018-7934 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-7934?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Mate 10 Pro Firmware, Huawei Mate 10 Pro.