Security Advisory

CVE-2018-7923

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-09-12 15:00:00
Last updated 2024-08-05 06:37:59
Assigner huawei
State PUBLISHED

Description

Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.