CVE-2018-7946

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-11-27 · updated 2026-06-17
Weakness: CWE-200

Description

There is an information leak vulnerability in some Huawei smartphones. An attacker may do some specific configuration in the smartphone and trick a user into inputting some sensitive information. Due to improper design, successful exploit may cause some information leak.

Affected products

Huawei Honor 7A Firmware: before 8.0.0.195\(c00\) — fixed in 8.0.0.195\(c00\)
Huawei Honor 9 Lite Firmware: before 8.0.0.182\(c01\) — fixed in 8.0.0.182\(c01\)

How to fix

Upgrade to a fixed version: Huawei Honor 7A Firmware 8.0.0.195\(c00\); Huawei Honor 9 Lite Firmware 8.0.0.182\(c01\). Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-7946 or the next vulnerability affects your stack