Huawei Mobile TEE Module Use After Free Vulnerability

The Mate 9 and Mate 9 Pro are a smartphone from Huawei China. Trusted Execution Environment TEE is a secure area on the main processor of a mobile device The Huawei Mate 9 and Mate 9 Pro phones have an Use After Free UAF security vulnerability in the TEE module. An attacker induces a user to...

HooToo Trip Mate 6 vshttpd buffer overflow vulnerability (CNVD-2017-07295)

The HooToo Trip Mate 6 TM6 is a portable wireless router from HooToo USA. vshttpd aka ioos is one of the http servers. A stack buffer overflow vulnerability exists in vshttpd in HooToo TM6 firmware version 2.000.030 and earlier. A remote attacker can exploit this vulnerability to control the...

HooToo Trip Mate 6 vshttpd Buffer Overflow Vulnerability

The HooToo Trip Mate 6 TM6 is a portable wireless router from HooToo USA. vshttpd aka ioos is one of the http servers. A heap buffer overflow vulnerability exists in vshttpd in HooToo TM6 firmware version 2.000.030 and earlier. A remote attacker can exploit this vulnerability to control the progr...

Heap overflow

Heap buffer overflow in vshttpd aka ioos in HooToo Trip Mate 6 TM6 firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header...

CVE-2017-9026

Stack buffer overflow in vshttpd aka ioos in HooToo Trip Mate 6 TM6 firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request...

CVE-2017-9025

Heap buffer overflow in vshttpd aka ioos in HooToo Trip Mate 6 TM6 firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header...

CVE-2017-9026

Stack buffer overflow in vshttpd aka ioos in HooToo Trip Mate 6 TM6 firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request...

CVE-2017-9025

Heap buffer overflow in vshttpd aka ioos in HooToo Trip Mate 6 TM6 firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header...

CVE-2017-9026

CVE-2017-9026 affects the HooToo Trip Mate 6 (TM6) with vshttpd (ioos) in firmware up to version 2.000.030 and earlier. The vulnerability is a stack buffer overflow in vshttpd triggered by a specially crafted fname parameter in a GET request, allowing remote unauthenticated attackers to control t...

CVE-2017-9025

The CVE-2017-9025 entry concerns HooToo Trip Mate 6 (TM6) devices with vshttpd (ioos) in firmware 2.000.030 and earlier. The issue is a heap-based buffer overflow triggered by overly long HTTP Cookie header values sent to protocol.csp, leading to remote, unauthenticated execution of code or denia...

Huawei Mate 9 camerafs driver buffer overflow vulnerability

Huawei Mate9 is a smartphone from Chinese company Huawei huawei. A buffer overflow vulnerability exists in the Huawei Mate 9 camerafs driver. Due to the lack of parameter checking, an attacker induces a user to install a malicious application that has gained system privileges on Android, and the...

CVE-2016-8792

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before CRR-TL00C01B368,...

CVE-2016-8756

ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service restart...

CVE-2016-8756

ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service restart...

Privilege escalation

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before CRR-TL00C01B368,...

Buffer overflow

The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, versions before NXT-CL00C92B386, versions before NXT-DL00C17B386, versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before...

Privilege escalation

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before CRR-TL00C01B368,...

Code injection

ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service restart...

CVE-2016-8791

CVE-2016-8791 affects Huawei Mate 8, Mate S and P8 devices with specific pre-patch firmware versions (Mate 8: NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386; Mate S: CRR-CL00C92B368, CRR-CL20C92B368, CRR-TL00C01B368, CRR-UL00C00B368, CRR-UL20C00B368; P8: GRA-TL00C01B366, GRA-C...

CVE-2016-8794

CVE-2016-8794 affects Huawei Mate 8 (before specific builds), Mate S (before specific builds) and P8 (before specific builds). The root cause is input validation flaws in Huawei smartphones allowing an attacker with graphic or Camera privileges to crash the system or escalate privileges. Impact d...