CVE-2018-7925

Severity: medium (CVSS 6.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-11-13 · updated 2026-06-17
Weakness: CWE-863

Description

The radio module of some Huawei smartphones Emily-AL00A The versions before 8.1.0.171(C00) have a lock-screen bypass vulnerability. An unauthenticated attacker could start third-part input method APP through certain operations to bypass lock-screen by exploit this vulnerability.

Affected products

Huawei Technologies Co., Ltd. Emily-AL00A: before 8.1.0.171\(c00\) — fixed in 8.1.0.171\(c00\)

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. Emily-AL00A 8.1.0.171\(c00\). Check the vendor advisory for mitigations.

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181105-01-smartphone-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181105-01-smartphone-en

Get alerted when CVE-2018-7925 or the next vulnerability affects your stack