CVE-2018-7930 Information disclosure in Mate 9

What is CVE-2018-7930?

CVE-2018-7930 is a medium-severity vulnerability in Huawei Technologies Co., Ltd. Mate 9, published on 11 Apr 2018. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

The Near Field Communication (NFC) module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366(C567) has an information leak vulnerability due to insufficient validation on data transfer requests. When an affected mobile phone sends files to an attacker's mobile phone using the NFC function, the attacker can obtain arbitrary files from the mobile phone, causing information leaks.

Weakness: CWE-200

Which versions are affected by CVE-2018-7930?

It affects 1 product.

Products include Huawei Mate 9 Firmware.

How do I fix CVE-2018-7930?

No fix has been published for CVE-2018-7930 yet. Limit exposure of the affected software until one is available.

Is CVE-2018-7930 being exploited?

There is no known exploitation of CVE-2018-7930 in the wild and no public exploit code.

Other vulnerabilities in Huawei Technologies Co., Ltd. Mate 9

• CVE-2017-15316 Use after free in Mate 9 High 7.8
• CVE-2017-2716 Memory corruption in Mate 9 High 7.8
• CVE-2017-8142 Use after free in Mate 9, Mate 9 Pro High 7.8
• CVE-2017-2706 Path traversal in Mate 9 High 7.1
• CVE-2017-2707 Privilege escalation in Mate 9 High 7.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-fx44-x6g3-42f2.