VULNERABILITY INTELLIGENCE

CVE-2018-7957

CVSS score3.3 LOW
EPSS probability0.21%
CISA KEVNot currently listed
Published2018-07-31
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.

Weakness classification

  • CWE-863: Incorrect Authorization

Primary references