CVE-2018-7934

Vulnerability

Some Huawei mobile phones, specifically the Mate 10 Pro with versions before BLA-L29 8.0.0.145(C432), have a denial of service (DoS) vulnerability because the device firmware does not properly adapt to specific screen gestures [1]. This makes the system unstable when those gestures are performed.

Exploitation

An attacker must trick the user into installing a malicious application on the device. Once installed, the attacker has no further interaction; the vulnerability is triggered automatically when the user performs the specific gesture sequence [1]. No special network position or authentication is required for exploitation beyond app installation.

Impact

Successful exploitation causes apps running in the foreground to crash, resulting in a denial of service condition that disrupts legitimate user activity [1]. The device itself remains operational, but the usability of the frontend application is lost until the user manually restarts the app.

Mitigation

Huawei released a fixed version BLA-L29 8.0.0.145(C432) to address this vulnerability. Users should update their Mate 10 Pro devices to this or any later version via the official update mechanism [1]. No other workarounds are documented in the available references.