There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00).

Published 7 y ago 2018-12-04 · modified 4 mo ago 2026-06-17 · JSON

CVSS

5.9

v3.0 · NVD

CISA KEV

not known exploited

EPSS

0.7%

percentile 54%

Public exploits

none known

There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause a denial of service condition.

Exploit prediction (EPSS)

0.73% probability of exploitation in the next 30 days, higher than 54% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	5.9	`CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H`
NVD	2.0	4.3	`AV:N/AC:M/Au:N/C:N/I:N/A:P`

Affected products

Huawei Technologies Co., Ltd. Huawei P20

Classification

Weakness

CWE-787 Out-of-bounds Write

References

huawei.com /en/psirt/security-advisories/huawei-sa-20181128-02-smartphone-en · x_refsource_CONFIRM, x_transferred

Sources

CVE List: CVE-2018-7987
NVD: CVE-2018-7987

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.