CVE-2016-8792

CVE-2016-8792 affects Huawei smartphones (Mate 8, Mate S, and P8). In affected builds, devices with graphic or Camera permissions are vulnerable due to input validation failures that allow crashing the system or elevating privileges. The Huawei security advisory HWPSIRT-2016-05147/05152/05153/052...

CVE-2016-8791

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before CRR-TL00C01B368,...

CVE-2016-8793

CVE-2016-8793 affects Huawei Mate 8, Mate S, and P8 devices with specific pre-update firmware versions. The root cause is missing parameter validation in input handling, which, when combined with Graphic or Camera permissions, can crash the system or escalate privileges. The affected software ver...

CVE-2016-8756

CVE-2016-8756 concerns the ION memory management module in Huawei Mate 8 devices (NXT-AL10/NXT-DL10/NXT-TL10/NXT-CL10, and earlier software versions) that can be exploited to trigger a denial of service resulting in a device restart. Public details describe a local DoS vector where an attacker co...

CVE-2016-8792

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before CRR-TL00C01B368,...

CVE-2016-8794

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before CRR-TL00C01B368,...

CVE-2016-8774

The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, versions before NXT-CL00C92B386, versions before NXT-DL00C17B386, versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before...

CVE-2016-8756

ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions allows attackers to cause a denial of service restart...

CVE-2016-8774

CVE-2016-8774 concerns a buffer overflow in the HIFI driver on Huawei smartphones (Mate 8, Mate S, P8, P9) prior to specific firmware revisions (e.g., Mate 8: NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386; Mate S: CRR-…C368 series; P8/P9 likewise). The root cause is inadequat...

Code injection

The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01,...

CVE-2015-8678

The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01,...

CVE-2015-8678

The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01,...

CVE-2015-8678

The CVE-2015-8678 entry affects Huawei P8 and Mate S devices, where the ION driver vulnerabilities in multiple software branches (e.g., GRA-TL00, GRA-CL00, GRA-CL10, GRA-UL00/UL10; CRR-TL00/UL00/CL00) allow remote attackers to crash the system by tempting users to run a crafted app. Huawei’s advi...

Huawei Mate 9 Phone Finder bypasses security vulnerability

Huawei Mate9 is a smartphone from Chinese company Huawei huawei.PhoneFinder Phone Finder is one of the security mechanisms which is mainly used to ensure that the phone is not bricked or restored to factory settings after it is lost and stolen. A security bypass vulnerability exists in the Phone...

Huawei Honor 7/Mate S Phone Theme App Elevation of Privilege Vulnerability

Honor 7 and Mate S are a smartphone product of Huawei, a Chinese company. An elevation of privilege vulnerability exists in the theme application of the Huawei Honor 7/Mate S phones. As the app fails to check for theme packages, an attacker can exploit the vulnerability to upload theme packages...

Huawei Mobile Phone Retrieval Feature Security Bypass Vulnerability

The huawei Mate 9, P9 are smartphones from the Chinese company Huawei Huawei. The Huawei phones are vulnerable to a security bypass vulnerability in the retrieval feature, which allows an attacker to bypass the phone retrieval and access the phone's system settings page by following specific step...

Huawei Mate 8/P9 Phone Driver Buffer Overflow Vulnerability

Huawei Mate 8, P9 is a smartphone product of Huawei, China. A buffer overflow security vulnerability exists in the ddrdevfreq driver of the Huawei Mate 8 and P9 phones due to a lack of parameter checking. An attacker who has gained root privileges on Android can trick the user into installing a...

Huawei Mate 8 ION Memory Management Denial of Service Vulnerability

Huawei Mate 8 is a smartphone product of Chinese company Huawei Huawei. A denial of service vulnerability exists in the ION memory management module of the Huawei Mate 8. An attacker can exploit the vulnerability by tricking the user into installing a malicious application that inputs specific...

Buffer overflow vulnerability in HIFI driver for multiple Huawei phones

Huawei Mate 8, Mate S, P8, P9 are smartphones from Huawei. A buffer overflow vulnerability exists in the HIFI driver of multiple Huawei phones. Due to the lack of parameter checking in the HIFI driver of certain Huawei phones, an attacker could exploit the vulnerability to construct specific...

Elevation of Privilege Vulnerability in Multiple Huawei Phones (CNVD-2016-11306)

Huawei Mate 8, Mate S, P8 are smartphones from Huawei. A security vulnerability in the form of missing parameter checking exists in several Huawei phones. The vulnerability is exploited on the premise that an attacker obtains Graphic or Camera permissions and induces the user to install a malicio...