VULNERABILITY INTELLIGENCE

CVE-2018-7906

CVSS score5.5 MEDIUM
EPSS probability0.56%
CISA KEVNot currently listed
Published2018-09-12
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful exploitation can cause the smartphone black screen until restarting the phone.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references