PT-2018-18362 · Huawei · P10 Plus+2

Crixer + 1 · Publicado 2018-07-31 · Atualizado 2018-10-04 · CVE-2018-7992

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Huawei MediaPad M3 version BTV-W09C128B353CUSTC128D001 Mate 9 Pro versions earlier than 8.0.0.356(C00) P10 Plus versions earlier than 8.0.0.357(C00)

Description: The issue is related to a buffer overflow. It occurs because the Mdapt Driver does not sufficiently validate input. An attacker could exploit this by tricking a user into installing a malicious application that sends crafted parameters to the driver. This could result in a denial of service condition.

Recommendations: For Huawei MediaPad M3 version BTV-W09C128B353CUSTC128D001, update to a version that includes the fix for this issue. For Mate 9 Pro versions earlier than 8.0.0.356(C00), update to version 8.0.0.356(C00) or later. For P10 Plus versions earlier than 8.0.0.357(C00), update to version 8.0.0.357(C00) or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2018-7992

Produtos afetados

Mate 9 Pro

Mediapad M3

P10 Plus

Referências · 3

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20180725-01-dos-en · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-7992 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7992 · Aviso do Fabricante