CVE-2017-17227

CVE-2017-17227 describes an out-of-bounds memory access vulnerability in the GPU driver of Huawei Mate 10 smartphones. Affected builds include ALP-L09 before 8.0.0.120 (C212), before 8.0.0.127 (C900), and before 8.0.0.128 (402/C02/C109/C346/C432/C652). The issue arises from input parameter valida...

CVE-2017-17279

The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343C00 has an authentication bypass vulnerability due to the improper design of the module. An attacker tricks a user into installing a malicious application, and the application can...

CVE-2017-17279

The CVE-2017-17279 issue affects Huawei Mate 9 Pro devices with software before LON-AL00B 8.0.0.343(C00), involving the soundtrigger module. The root cause is an improper design of the soundtrigger authentication mechanism, enabling an attacker to trick a user into installing a malicious app and ...

CVE-2017-17225

The Near Field Communication NFC module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340aC00 has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobi...

CVE-2017-17326

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of...

CVE-2017-17326

Summary (mode C): CVE-2017-17326 affects Huawei Mate 9 Pro smartphones (LON-AL00B139D/LON-AL00B229) and describes an activation lock bypass due to insufficient protection of the activation mechanism. The vulnerability could let an attacker bypass the activation lock and activate the device with a...

CVE-2017-17225

CVE-2017-17225 maps to a buffer overflow in the NFC module of Huawei Mate 9 Pro devices running versions prior to LON-AL00B 8.0.0.340a(C00). The root cause is lack of input validation in the NFC stack, enabling an attacker to inject data via an NFC reader or similar device, potentially causing a ...

CVE-2017-17227

GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120C212; The versions before ALP-L09 8.0.0.127C900; The versions before ALP-L09 8.0.0.128402/C02/C109/C346/C432/C652 has a out-of-bounds memory access vulnerability due to the input parameters validation. An attacker...

CVE-2017-17324

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks...

Huawei Mate 9 Pro Forensic Bypass Vulnerability

Huawei Mate 9 Pro is a smartphone from Huawei Huawei. A forensic bypass vulnerability in the voice wake-up module in the Huawei Mate 9 Pro phone could allow an attacker to trick a user into installing a malicious application, bypass authentication, and take control of the phone to send a short...

Information leakage vulnerability in NFC module of multiple Huawei phones

Huawei Mate 9 Pro is a smartphone from Huawei Huawei. An information disclosure vulnerability exists in the NFC module of multiple Huawei phones, which can be exploited by an attacker to cause partial information disclosure by tricking the user into performing a specific action and tampering with...

CVE-2017-8165

Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak...

CVE-2017-8165

Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak...

Information disclosure

Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak...

CVE-2017-17139

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334C00; the versions before LON-AL00B 8.0.0.334C00 have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and...

CVE-2017-17139

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334C00; the versions before LON-AL00B 8.0.0.334C00 have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and...

Information disclosure

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334C00; the versions before LON-AL00B 8.0.0.334C00 have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and...

CVE-2017-8165

The CVE-2017-8165 entry concerns Huawei Mate 9 smartphones with CMA information-disclosure vulnerability in the CMA implementation. Affected devices are Mate 9 versions earlier than MHA-AL00BC00B233. An attacker can lure a user into installing a malicious app, which may trigger a sensitive inform...

CVE-2017-17139

CVE-2017-17139 affects Huawei Mate 9 and Mate 9 Pro devices running before MHA-AL00B/LON-AL00B 8.0.0.334(C00). The issue is an information-leak in the date service proxy implementation that can allow a user-tricked malicious app to access kernel date information, causing sensitive data exposure. ...

CVE-2017-17139

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334C00; the versions before LON-AL00B 8.0.0.334C00 have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and...