CVE-2018-7906: Huawei Leland-AL00 Firmware

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of service (DoS) vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Due to insufficient verification of the parameter, successful exploitation can cause the smartphone black screen until restarting the phone.

Affected products

• Huawei Leland-AL00 Firmware: version 8.0.0.114(c636) only
• Huawei Lleland-AL00A Firmware: version 8.0.0.171(c00) only

Published 2018-09-12. Last modified 2026-06-17.