CVE-2017-8153

CVE-2017-8153 describes a privilege elevation vulnerability in Huawei VMall for Android versions prior to 1.5.8.5, stemming from improper design. An attacker could trick users into installing a malicious application that sends HTTP requests and executes JavaScript without requiring Internet access permissions. This vulnerability carries a CVSSv3 score of 7.1 (HIGH), indicating a local attack vector with low complexity, and could lead to resource occupation or information leakage. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.