CVE-2018-7938: Huawei p10 Firmware

Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days.

P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can read some hardware serial number, which may cause sensitive information leak.

Affected products

• Huawei p10 Firmware: before victoria-al00ac00b217 (fixed in victoria-al00ac00b217)

Published 2018-09-04. Last modified 2026-06-17.