Skip to content
OpenAdvisories
Unscored CVE-2018-7923 EUVD-2018-19635GHSA-7mvq-693f-g39p

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to l…

Published Sep 12, 2018 · Updated Aug 5, 2024 · Assigned by huawei

Description

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.

Affected products

VendorProductAffectedFixed
Huawei Technologies ALP-L09 Versions earlier than ALP-L09 8.0.0.150(C432) —

References