Huawei cell phone input checksum vulnerability (CNVD-2018-18483)

Huawei Mate 10 ALP-L09 is a smartphone product of Chinese company Huawei Huawei. An input validation vulnerability exists in the Huawei Mate 10 ALP-L09 phone due to a lack of parameter checking. An attacker induces a user who has gained root privileges to install a carefully crafted application,...

Huawei Mate 10 Pro phone FRP bypass vulnerability

Huawei Mate 10 Pro is a smartphone product of Chinese company Huawei Huawei. The Huawei Mate 10 Pro phone suffers from an FRP bypass vulnerability, which allows an attacker to bypass the "Find My Phone" protection after a series of voice and keypad actions during a phone reset. Successful...

CVE-2018-7990

Mate10 Pro Huawei smart phones with the versions before 8.1.0.326C00 have a FRP bypass vulnerability. During the mobile phone reseting process, an attacker could bypass "Find My Phone" protect after a series of voice and keyboard operations. Successful exploit could allow an attacker to bypass FR...

CVE-2018-7936

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148C432 have a Factory Reset Protection FRP bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can connect the phone with PC and send special...

CVE-2018-7936

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148C432 have a Factory Reset Protection FRP bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can connect the phone with PC and send special...

CVE-2018-7936

CVE-2018-7936 affects Huawei Mate 10 Pro devices with firmware prior to BLA-L29 8.0.0.148 (C432). The FRP bypass occurs when reconfiguring FRP; an attacker can connect the phone to a PC and issue instructions to install a third‑party desktop and disable the boot wizard, effectively bypassing FRP ...

CVE-2018-7936

Mate 10 Pro Huawei smart phones with the versions before BLA-L29 8.0.0.148C432 have a Factory Reset Protection FRP bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can connect the phone with PC and send special...

Huawei Mate 10 Pro Phone FRP Security Bypass Vulnerability

Huawei Mate 10 Pro is a smartphone product of Chinese company Huawei Huawei. The Huawei Mate 10 Pro phone suffers from an FRP security bypass vulnerability, which allows an attacker to bypass the FRP functionality by turning off the boot wizard after connecting the phone with a PC and installing ...

CVE-2018-7992

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356C00; P10 Plus versions earlier than 8.0.0.357C00 has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a...

CVE-2018-7993

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause...

CVE-2018-7992

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356C00; P10 Plus versions earlier than 8.0.0.357C00 has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a...

CVE-2018-7993

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause...

Buffer overflow

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356C00; P10 Plus versions earlier than 8.0.0.357C00 has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a...

Design/Logic Flaw

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause...

CVE-2018-7992

Mdapt Driver of Huawei MediaPad M3 BTV-W09C128B353CUSTC128D001; Mate 9 Pro versions earlier than 8.0.0.356C00; P10 Plus versions earlier than 8.0.0.357C00 has a buffer overflow vulnerability. The driver does not sufficiently validate the input, an attacker could trick the user to install a...

CVE-2018-7993

CVE-2018-7993 concerns a use-after-free vulnerability in the mediaserver component on Huawei Mate 10 devices running versions before ALP-AL00 8.1.0.311. An attacker can entice a user to install a malicious app, which causes mediaserver to reference memory after it has been freed, enabling arbitra...

CVE-2018-7993

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause...

CVE-2018-7992

CVE-2018-7992 affects Huawei Mdapt (madapt) driver used by Huawei MediaPad M3, Mate 9 Pro (pre-8.0.0.356(C00)) and P10 Plus (pre-8.0.0.357(C00)). The vulnerability is a buffer overflow caused by insufficient input validation in the driver, which could allow an attacker to trick a user into instal...

Huawei Mate 10 Phone Memory Misreference Vulnerability

Huawei Mate 10 is a smartphone from Chinese company Huawei Huawei. A memory misreference vulnerability exists in the mediaserver component of the Huawei Mate 10 phone. An attacker induces a user to install a malicious application that causes certain freed memory to be accessed again. Successful...

Huawei Mate 9 Pro Cell Phone Short Message Module Denial of Service Vulnerability

The Huawei Mate 9 Pro is a smartphone product of the Chinese company Huawei Huawei. A denial of service vulnerability exists in the SMS module of the Huawei Mate 9 Pro. An unauthenticated attacker could set up a pseudo-base station and send certain malicious short messages to a cell phone that...