Detections
Analytics
CVE-2018-7922
high
Description
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vulnerability due to lack of parameter check. An attacker tricks the user who has root privilege to install a crafted application, the application may modify the specific data to exploit the vulnerability. Successful exploit could allow the attacker to execute arbitrary code.
References
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180911-01-smartphone-en