CVE-2018-7994

Some Huawei products IPS Module V500R001C50; NGFW Module V500R001C50; V500R002C10; NIP6300 V500R001C50; NIP6600 V500R001C50; NIP6800 V500R001C50; Secospace USG6600 V500R001C50; USG9500 V500R001C50 have a memory leak vulnerability. The software does not release allocated memory properly when processing Protal questionnaire. A remote attacker could send a lot questionnaires to the device, successful exploit could cause the device to reboot since running out of memory.

• CWE-772

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180704-01-firewall-enVendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180704-01-firewall-enVendor Advisory

Published

Jul 31, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7988There is a Factory Reset Protection (FRP) bypass vulnerabili…
• CVE-2018-7989Huawei Mate 10 pro smartphones with the versions before BLA-…
• CVE-2018-7990Mate10 Pro Huawei smart phones with the versions before 8.1.…
• CVE-2018-7991Huawei smartphones Mate10 with versions earlier before ALP-A…
• CVE-2018-7992Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D0…
• CVE-2018-7993HUAWEI Mate 10 smartphones with versions earlier than ALP-AL…
• CVE-2018-7995Race condition in the store_int_with_restart() function in a…
• CVE-2018-7996Eramba e1.0.6.033 has Stored XSS on the tooltip box via the …
• CVE-2018-7997Eramba e1.0.6.033 has Reflected XSS on the Error page of the…
• CVE-2018-7998In libvips before 8.6.3, a NULL function pointer dereference…
• CVE-2018-7999In libgraphite2 in graphite2 1.3.11, a NULL pointer derefere…
• CVE-2018-8000In PoDoFo 0.9.5, there exists a heap-based buffer overflow v…