CVE-2018-7957: Huawei Victoria-AL00 Firmware

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Huawei smartphones with software Victoria-AL00 8.0.0.336a(C00) have an information leakage vulnerability. Because an interface does not verify authorization correctly, attackers can exploit an application with the authorization of phone state to obtain user location additionally.

Affected products

• Huawei Victoria-AL00 Firmware: version victoria-al00_8.0.0.336a(c00) only

Published 2018-07-31. Last modified 2026-06-17.