CVE-2018-7992
Last modified
CVE-2018-7992 is a vulnerability of currently unknown severity. Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a malicious application which would send crafted parameters to the driver. EPSS estimates a 0.55% chance of exploitation in the next 30 days.
Description
Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356(C00); P10 Plus versions earlier than 8.0.0.357(C00) has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a malicious application which would send crafted parameters to the driver. Successful exploit could cause a denial of service condition.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Mediapad M3 Firmware | btv-w09c128b353custc128d001 |
| Huawei | Mate 9 Pro Firmware | < 8.0.0.356\(c00\) |
| Huawei | P10 Plus Firmware | < 8.0.0.357\(c00\) |
| Huawei | Mate 9 Firmware | < 8.0.0.356\(c00\) |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-7992?
How severe is CVE-2018-7992?
How do I fix CVE-2018-7992?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-7986Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2018-7987There is an out-of-bounds write vulnerability on Huawei P20 …
- CVE-2018-7988There is a Factory Reset Protection (FRP) bypass vulnerabili…
- CVE-2018-7989Huawei Mate 10 pro smartphones with the versions before BLA-…
- CVE-2018-7990Mate10 Pro Huawei smart phones with the versions before 8.1.…
- CVE-2018-7991Huawei smartphones Mate10 with versions earlier before ALP-A…
- CVE-2018-7993HUAWEI Mate 10 smartphones with versions earlier than ALP-AL…
- CVE-2018-7994Some Huawei products IPS Module V500R001C50; NGFW Module V50…
- CVE-2018-7995Race condition in the store_int_with_restart() function in a…
- CVE-2018-7996Eramba e1.0.6.033 has Stored XSS on the tooltip box via the …
- CVE-2018-7997Eramba e1.0.6.033 has Reflected XSS on the Error page of the…
- CVE-2018-7998In libvips before 8.6.3, a NULL function pointer dereference…
Are you affected by CVE-2018-7992?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
