CVE-2017-2716

Huawei Mate 9 camerafs driver (versions earlier than MHA-AL00BC00B173) contains a buffer overflow due to lack of input validation. An attacker can trick a user into installing a malicious app with Android system privileges and send a specific parameter to the driver, causing a system crash or pri...

CVE-2017-2701

Mate 9 with software MHA-AL00AC00B125 has a denial of service DoS vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting message from the application, it could be exploited to cause some functions of system unavailable...

CVE-2017-2701

The CVE-2017-2701 entry describes a DoS vulnerability on Huawei Mate 9 smartphones (MHA-AL00AC00B125). The root cause is the system not verifying broadcasting messages from an installed application, allowing a user tricked into installing a malicious app to cause certain system functions to becom...

CVE-2017-8142

CVE-2017-8142 affects Huawei Mate 9 and Mate 9 Pro devices, where the TEE module driver is vulnerable to a Use-After-Free (UAF). The issue occurs on software versions earlier than MHA-AL00BC00B221 and LON-AL00BC00B221. An attacker can entice a user to install a malicious app that spawns multiple ...

CVE-2017-8142

The Trusted Execution Environment TEE module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and...

CVE-2017-2707

Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message...

CVE-2017-2707

CVE-2017-2707 pertains to Huawei Mate 9 devices with software MHA-AL00AC00B125, where a privilege-escalation flaw in the Push module can be triggered by a user-saving malicious rich-media in a message. The underlying issue enables an attacker to delete messages or impersonate the user to send mes...

Huawei Mate 9 Information Disclosure Vulnerability

Huawei Mate 9 is a smartphone from Huawei. Huawei Mate 9 has an information leakage vulnerability in the implementation of the CMA mechanism, which can be exploited by an attacker to leak sensitive information by inducing a user to install a malicious mobile application...

CVE-2015-4422

The TEEOS module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service memory corruption via a crafted application...

CVE-2015-4421

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

Memory corruption

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

CVE-2015-4422

CVE-2015-4422 concerns Huawei Mate 7 devices (Mate7-TL10) in the TEEOS module. A local attacker with root permissions can escalate privileges or trigger memory corruption leading to denial of service via a crafted app. The affected product is described as the Mate 7 with TEEOS, before the patch v...

CVE-2015-4421

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

CVE-2015-4421

The CVE-2015-4421 issue affects Huawei Mate 7tzdriver and TEEOS. A flawed input check in the /dev/tc_ns_client kernel interface allows a user-space process to influence trusted execution environment calls, enabling local privilege escalation or memory corruption that can lead to a denial of servi...

CVE-2015-4422

The TEEOS module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service memory corruption via a crafted application...

Huawei Mate 9 DoS Vulnerability

Huawei Mate 9 is a smartphone from Chinese company Huawei Huawei. The Huawei Mate 9 is vulnerable to a DoS attack. An attacker can exploit the vulnerability to trick users into installing a malicious application, which can cause some system functions to become unavailable due to the system's...

Debian DSA-3916-1 : atril - security update

It was discovered that Atril, the MATE document viewer, made insecure use of tar when opening tar comic book archives CBT. Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 3916-1] atril security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3916-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 21, 2017 https://www.debian.org/security/faq -...

Huawei Mate 9 Push Module Privilege Vulnerability

Huawei Mate 9 is a smartphone from Chinese company Huawei.Push module is one of the message push modules. A privilege extraction vulnerability exists in the Push module in Huawei Mate 9 version MHA-AL00AC00B125. An attacker can exploit the vulnerability by tricking a user into saving a malicious...

Huawei Mate 9 Push module directory traversal vulnerability

Huawei Mate 9 is a smartphone from Chinese company Huawei.Push module is one of the message push modules. A directory traversal vulnerability exists in the Push module in Huawei Mate 9 version MHA-AL00AC00B125 due to the program not checking the file name when compressing the file. An attacker...