TI-2018-05744 Aliases CVE-2018-7938 GHSA-mggw-wg5r-rgfm

Information disclosure in Huawei P10

LOW 17CWE-200Published 2018-09-04 · Updated 2024-08-05

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · None · None
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can read some hardware serial number, which may cause sensitive information leak.

Why it matters now

EPSS 0.00537 45th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Huawei	P10	The versions before Victoria-AL00AC00B217	—	No fix listed	CNA

P10 VendorHuawei Affected The versions before Victoria-AL00AC00B217 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:huawei:p10_firmware::::::::	before victoria-al00ac00b217	Vulnerable	Huawei
cpe:2.3:h:huawei:p10:-:::::::*	not specified by NVD	Running on	Huawei

cpe:2.3:o:huawei:p10_firmware:*:*:*:*:*:*:*:* Versions before victoria-al00ac00b217 Vulnerable ·Huawei
cpe:2.3:h:huawei:p10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2018-7938
2026-10-03 Alias added: GHSA-mggw-wg5r-rgfm

References

Advisory 1

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180827-01-smartphone-en

TI-2017-01968 Memory corruption in Huawei P10 Plus,P10 CVSS 3.0HIGH 8.4
TI-2017-01966 Memory corruption in Huawei P10 Plus,P10 CVSS 3.0HIGH 8.4
TI-2017-01967 Memory corruption in Huawei P10 Plus,P10 CVSS 3.0HIGH 7.8
TI-2017-05725 Memory corruption in Huawei P10, P10 Plus CVSS 3.0HIGH 7.8
TI-2017-05747 Improper array index validation in Huawei P10 Plus,P10 CVSS 3.0MEDIUM 5.5
TI-2017-05721 Improper input validation in Huawei P10, P10 Plus CVSS 3.0MEDIUM 5.5

See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences