Medium severity · published Dec 4, 2018
CVE-2018-7987
There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00)
5.9
CVSS
0.7%
EPSS
No
On KEV
Description
There is an out-of-bounds write vulnerability on Huawei P20 smartphones with versions before 8.1.0.171(C00). The software does not handle the response message properly when the user doing certain inquiry operation, an attacker could send crafted message to the device, successful exploit could cause a denial of service condition.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
P20 Firmware · Huawei
before 8.1.0.171\(c00\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-7987
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-7987
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20181128-02-smartphone-en
More from P20 Firmware
7.8
CVE-2019-2215
Android Kernel Use-After-Free Vulnerability
8.8
CVE-2020-0022
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation
5.7
CVE-2019-5211
The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability
5.5
CVE-2020-9239
Huawei smartphones BLA-A09 versions 8.0.0.123(C212),versions earlier than 8.0.0.123(C567),versions earlier than 8.0.0.123(C797);BLA-TL00B versions earlier than…
5.5
CVE-2019-5212
There is an improper access control vulnerability in Huawei Share