CVE-2018-7993

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause execution of arbitrary code.

• CWE-416

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180711-01-smartphone-enVendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180711-01-smartphone-enVendor Advisory

Published

Jul 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7987There is an out-of-bounds write vulnerability on Huawei P20 …
• CVE-2018-7988There is a Factory Reset Protection (FRP) bypass vulnerabili…
• CVE-2018-7989Huawei Mate 10 pro smartphones with the versions before BLA-…
• CVE-2018-7990Mate10 Pro Huawei smart phones with the versions before 8.1.…
• CVE-2018-7991Huawei smartphones Mate10 with versions earlier before ALP-A…
• CVE-2018-7992Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D0…
• CVE-2018-7994Some Huawei products IPS Module V500R001C50; NGFW Module V50…
• CVE-2018-7995Race condition in the store_int_with_restart() function in a…
• CVE-2018-7996Eramba e1.0.6.033 has Stored XSS on the tooltip box via the …
• CVE-2018-7997Eramba e1.0.6.033 has Reflected XSS on the Error page of the…
• CVE-2018-7998In libvips before 8.6.3, a NULL function pointer dereference…
• CVE-2018-7999In libgraphite2 in graphite2 1.3.11, a NULL pointer derefere…