CVE-2018-7906

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-09-12 · updated 2026-06-17
Weakness: CWE-20

Description

Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful exploitation can cause the smartphone black screen until restarting the phone.

Affected products

Huawei Leland-Al00 Firmware: 8.0.0.114(c636)
Huawei Lleland-Al00A Firmware: 8.0.0.171(c00)

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180905-01-smartphone-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180905-01-smartphone-en

Get alerted when CVE-2018-7906 or the next vulnerability affects your stack