GHSA-8fvm-8w45-c4j7
GitHub Security Advisory
⚠ Unreviewed
LOW
Has CVE
Advisory Details
Huawei HiWallet App with the versions before 8.0.4 has an arbitrary lock pattern change vulnerability. It needs to verify the user's Huawei ID during lock pattern change. An attacker with root privilege who gets a user's smart phone may bypass Huawei ID verification by special operation. Successful exploit of this vulnerability can allow an attacker to change the lock pattern of HiWallet.
Related CVEs
Key Information
2.5
/10
Dataset
Last updated: August 31, 2025 6:33 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.