Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability.

Published 8 y ago 2018-07-31 · modified 4 mo ago 2026-06-17 · JSON

CVSS

3.3

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.2%

percentile 12%

Public exploits

none known

Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.

Exploit prediction (EPSS)

0.21% probability of exploitation in the next 30 days, higher than 12% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	3.3	`CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N`
NVD	2.0	2.1	`AV:L/AC:L/Au:N/C:P/I:N/A:N`

Affected products

Huawei Technologies Co., Ltd. Victoria-AL00

Classification

Weakness

CWE-863 Incorrect Authorization

References

huawei.com /en/psirt/security-advisories/huawei-sa-20180704-01-smartphone-en · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2018-7957
NVD: CVE-2018-7957

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.