Loading HuntDB...

GHSA-pxvh-phh5-pgf4

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

Huawei APP HiWallet earlier than 5.0.3.100 versions do not support signature verification for APK file. An attacker could exploit this vulnerability to hijack the APK and upload modified APK file. Successful exploit could lead to the APP is hijacking.

Related CVEs

Key Information

GHSA ID
GHSA-pxvh-phh5-pgf4
Published
May 17, 2022 12:16 AM
Last Modified
May 17, 2022 12:16 AM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: August 31, 2025 6:33 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.