VULNERABILITY INTELLIGENCE
CVE-2018-7987
CVSS score5.9 MEDIUM
EPSS probability0.73%
CISA KEVNot currently listed
Published2018-12-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause a denial of service condition.
Weakness classification
- CWE-787: Out-of-bounds Write
Primary references
- psirt@huawei.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory