huawei-p10-cve-2017-8890-unlock

Huawei P10 CVE-2017-8890 bootloader-unlock research This repository documents an owner-authorized research project that ported CVE-2017-8890 to one Huawei P10 firmware, converted the kernel use-after-free into arbitrary kernel read/write and temporary root, reconstructed Huawei's NVE journal,...

Exploit for Double Free in Linux Linux_Kernel

Huawei P10 CVE-2017-8890 bootloader-unlock research This repo...

EUVD-2017-17111

Malware in sbrugna...

EUVD-2020-12698

Malware in sbrugna...

Design/Logic Flaw

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201C01E75R1P12T8, earlier than 9.1.0.252C185E2R1P9T8, earlier than 9.1.0.252C432E4R1P9T8, and earlier than 9.1.0.255C576E6R1P8T8 have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance...

PT-2020-15130

Name of the Vulnerable Software and Affected Versions Huawei P10 Plus versions earlier than 9.1.0.201C01E75R1P12T8 Huawei P10 Plus versions earlier than 9.1.0.252C185E2R1P9T8 Huawei P10 Plus versions earlier than 9.1.0.252C432E4R1P9T8 Huawei P10 Plus versions earlier than 9.1.0.255C576E6R1P8T8...

CVE-2020-1872: Undefined Security Weakness

Huawei smart phones P10 Plus with versions earlier than 9.1.0.201C01E75R1P12T8, earlier than 9.1.0.252C185E2R1P9T8, earlier than 9.1.0.252C432E4R1P9T8, and earlier than 9.1.0.255C576E6R1P8T8 have a digital balance bypass vulnerability. When re-configuring the mobile phone at the digital balance...

Huawei P10 Plus Digital Balance Bypass Vulnerability

Huawei P10 Plus is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in Huawei smart phones P10 Plus. During a reset of the phone, an attacker could use the vulnerability to bypass the boot wizard and turn on a business switch, thereby bypassing the Healthy Use of...

CVE-2018-7938: Exposure of Sensitive Information to an Unauthorized Actor

P10 Huawei smartphones with the versions before Victoria-AL00AC00B217 have an information leak vulnerability due to the lack of permission validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can read some hardware serial number,...

PT-2018-18337

Name of the Vulnerable Software and Affected Versions: Huawei P10 smartphones versions prior to Victoria-AL00AC00B217 Description: The issue is caused by a lack of permission validation, allowing an attacker to trick a user into installing a malicious application. This application can then read...

CVE-2017-8172

Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service DoS vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given...

CVE-2017-8150

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker wi...

CVE-2017-8145

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the...

PT-2017-18218

Name of the Vulnerable Software and Affected Versions Huawei Honor 8 versions earlier than FRD-AL00C00B391 Huawei Honor V8 versions earlier than FRD-DL00C00B391 Huawei Honor 9 versions earlier than KNT-AL10C00B391 Huawei Honor 9 versions earlier than KNT-AL20C00B391 Huawei Honor 9 versions earlie...

PT-2017-18158

Name of the Vulnerable Software and Affected Versions Huawei P10 versions before Victoria-L09AC605B162 Huawei P10 versions before Victoria-L29AC605B162 Huawei P10 Plus versions before Vicky-L29AC605B162 Description The issue is caused by a lack of parameter validation, leading to an out-of-bounds...

PT-2017-18159

Name of the Vulnerable Software and Affected Versions Huawei P10 versions before Victoria-L09AC605B162 Huawei P10 versions before Victoria-L29AC605B162 Huawei P10 Plus versions before Vicky-L29AC605B162 Description The issue is related to an arbitrary memory write vulnerability in the boot loader...

PT-2017-18178

Name of the Vulnerable Software and Affected Versions Huawei P10 Plus and P10 smartphones with versions earlier than VKY-AL00C00B157 Huawei P10 smartphones with versions earlier than VTR-AL00C00B157 Description The issue is related to a denial of service DoS vulnerability in the Isub service. An...

CVE-2017-8149: Improper Restriction of Operations within the Bounds of a Memory Buffer

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds memory access vulnerability due to the lack of parameter validation. An attack...

Huawei Cell Phone Write Arbitrary Memory Vulnerability

Huawei P10 and P10 Plus are both smartphone products from Chinese company Huawei Huawei. A write-anywhere memory vulnerability exists in the Bootloader of the Huawei P10 and P10 Plus due to a lack of parameter checking. An attacker who has gained root access to the Android system can trick the us...

Huawei Mobile Phone Bootloader Memory Access Out-of-Bounds Vulnerability

Huawei P10 and P10 Plus are both smartphone products from Chinese company Huawei Huawei. A memory access out-of-bounds vulnerability exists in the Bootloader of Huawei P10 and P10 Plus due to lack of parameter checking. An attacker who has gained root access to Android could trick users into...