Huawei Mate 9 Pro GPU Driver Arbitrary Memory Release Vulnerability

The Huawei Mate 9 Pro is a smartphone product of the Chinese company Huawei Huawei. An arbitrary memory release security vulnerability exists in the GPU driver of the Huawei Mate 9 Pro phone due to insufficient validation of parameter legitimacy by the memory management module. An attacker can...

Denial of Service Vulnerability in Multiple Huawei Phones

Huawei Mate 8 and others are smartphone products of the Chinese company Huawei Huawei. A denial of service vulnerability exists in several Huawei phones due to mishandling of malicious parameters. An attacker launches an attack by inducing a user to install a malicious APK and pre-install an...

Huawei Mate 10 Denial of Service Vulnerability

Huawei Mate 10 is a smartphone from Chinese company Huawei Huawei. The Huawei Mate 10 phone suffers from a denial of service vulnerability due to a failure to adapt to specific screen gestures. An attacker could trick a user into installing a malicious application, causing an application that is...

CVE-2017-17175

Short Message Service SMS module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354C00 has a Denial of Service DoS vulnerability. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone ...

CVE-2017-17175

Short Message Service SMS module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354C00 has a Denial of Service DoS vulnerability. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone ...

CVE-2017-17175

Short Message Service SMS module of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.354C00 has a Denial of Service DoS vulnerability. An unauthenticated attacker may set up a pseudo base station, and send special malware text message to the phone, causing the mobile phone ...

CVE-2017-17175

The CVE-2017-17175 entry concerns Huawei Mate 9 Pro devices with the SMS module, where an unauthenticated attacker can use a pseudo base station to send a crafted SMS that causes a Denial of Service, preventing calls and SMS. Affected versions are Mate 9 Pro before LON-AL00B 8.0.0.354(C00). Root ...

Memory corruption

Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356C00 has an arbitrary memory free vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter t...

CVE-2017-17173

Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356C00 has an arbitrary memory free vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter t...

CVE-2017-17173

Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356C00 has an arbitrary memory free vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter t...

CVE-2017-17173

The CVE-2017-17173 entry concerns Huawei Mate 9 Pro devices with older GPU driver versions (pre-LON-AL00B 8.0.0.356(C00)) where insufficient parameter verification in the GPU driver allows an attacker to trigger arbitrary kernel memory release via a crafted parameter. This could lead to a phone c...

Huawei Mate 9 Pro Mali Double Free Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on vulnerable installations of Huawei Mate 9 Pro. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Mali GPU...

Huawei Patches Four Server Bugs Rated High Severity

Huawei Technologies warned customers of four vulnerabilities rated high that impact 20 of its server models. Patches are available for each of the bugs that range from an authentication bypass vulnerability, privilege escalation vulnerability and two JavaScript Object Notation JSON injection...

Parrot Security 4.0 - Security GNU/Linux Distribution Designed with Cloud Pentesting and IoT Security in Mind

Parrot 4.0 is now available for download. The development process of this version required a lot of time, and many important updates make this release an important milestone in the history of our project. This release includes all the updated packages and bug fixes released since the last version...

CVE-2018-7940

Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129SP2C00 and earlier versions than 8.0.0.129SP2C01 have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations...

CVE-2018-7940

Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129SP2C00 and earlier versions than 8.0.0.129SP2C01 have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations...

Authentication flaw

Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129SP2C00 and earlier versions than 8.0.0.129SP2C01 have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations...

CVE-2018-7940

Huawei smart phones Mate 10 and Mate 10 Pro with earlier versions than 8.0.0.129SP2C00 and earlier versions than 8.0.0.129SP2C01 have an authentication bypass vulnerability. An attacker with high privilege obtains the smart phone and bypass the activation function by some specific operations...

CVE-2018-7940

The CVE-2018-7940 entry applies to Huawei Mate 10 and Mate 10 Pro devices with firmware earlier than 8.0.0.129 (SP2C00) or SP2C01, where an authentication bypass vulnerability exists. An attacker with high privileges can bypass activation through specific operations, effectively gaining control a...

Cisco MATE Collector Cross-Site Request Forgery Vulnerability

Cisco MATE Collector is the United States Cisco Cisco company's set of components running in the Cisco MATE network operations solutions, it can collect and continuously maintain network planning infrastructure elements, topology, operational status and traffic information statistics. A cross-sit...