CVE-2018-7990

Severity: medium (CVSS 4.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-09-04 · updated 2026-06-17

Description

Mate10 Pro Huawei smart phones with the versions before 8.1.0.326(C00) have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FRP.

Affected products

Huawei Technologies Co., Ltd. Mate 10 Pro: before 8.1.0.326\(c00\) — fixed in 8.1.0.326\(c00\)

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. Mate 10 Pro 8.1.0.326\(c00\). Check the vendor advisory for mitigations.

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180831-01-smartphone-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180831-01-smartphone-en

Get alerted when CVE-2018-7990 or the next vulnerability affects your stack