Design/Logic Flaw

The Maximsmartpadev driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before...

Heap overflow

Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL...

CVE-2015-8307

The Graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before...

CVE-2015-8679

CVE-2015-8679 affects Huawei P8 and Mate S devices via the Maxim_smartpa_dev driver; a crafted application can trigger an invalid memory access, causing a DoS (system crash). Affected pre-patch versions include P8: GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before ...

CVE-2015-8680

The CVE-2015-8680 entry describes an interface access control vulnerability in Huawei P8 and Mate S devices where the graphics driver can be manipulated by a crafted app with graphics permission to cause a denial of service (system crash) or gain privileges. Affected software includes Huawei mode...

CVE-2015-8318

CVE-2015-8318 is a heap-based buffer overflow in the HIFI driver affecting Huawei P8 models (GRA-TL00, GRA-CL00, GRA-CL10, GRA-UL00, GRA-UL10) with specific firmware updates (GRA-TL00C01B230, GRA-CL00C92B230, GRA-CL10C92B230, GRA-UL00C00B230, GRA-UL10C00B230) and Mate S models (CRR-TL00, CRR-UL00...

CVE-2015-8319

CVE-2015-8319 and CVE-2015-8318 describe heap-based buffer overflows in the HIFI driver on Huawei P8 and Mate S devices (software revisions listed in the descriptions). The vulnerabilities allow local attackers to cause a system crash or gain privileges via crafted applications. Affected products...

CVE-2015-8679

The Maximsmartpadev driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before...

CVE-2015-8681

The CVE-2015-8681 entry describes an interface access control vulnerability in the ovisp driver affecting Huawei P8 (GRA-TL00/GRA-CL00/GRA-CL10/GRA-UL00/GRA-UL10 variants) and Mate S (CRR-TL00/CRR-UL00/CRR-CL00 families). A crafted app with camera permission can cause a denial of service (system ...

CVE-2015-8318

Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL...

CVE-2015-8307

The CVE describes an interface access control vulnerability in Huawei graphics drivers affecting Huawei P8 models (GRA-TL00, GRA-CL00, GRA-CL10, GRA-UL00, GRA-UL10) before specific builds and Mate S models (CRR-TL00, CRR-UL00, CRR-CL00 before listed builds). The underlying issue allows a crafted ...

CVE-2015-8680

The Graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before...

Health Mate - Customized SSL, Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Health Mate published at the 'play' market has multiple vulnerabilities...

Huawei Mate S Local Integer Overflow Vulnerability

The Huawei Mate S is a smartphone product from the Chinese company Huawei. The Huawei Mate S suffers from a local integer overflow vulnerability that allows an attacker to exploit the vulnerability to execute arbitrary code in the context of the device or crash the application...

Huawei Mate 7 - '/dev/hifi_misc' Privilege Escalation

/ HuaWei Mate7 hifi driver Poc Writen by pray3r, / include include include include include include define HIFIMISCIOCTLWRITEPARAMS IOWR'A', 0x75, struct misciosyncparam struct misciosyncparam void parain; unsigned int parasizein; void paraout; unsigned int parasizeout; ; int mainint arg, char arg...

Huawei Mate 7 - devhifi_misc Privilege Escalation

Huawei Mate 7 - devhifimisc Privilege Escalation / HuaWei Mate7 hifi driver Poc Writen by pray3r, / include include include include include include define HIFIMISCIOCTLWRITEPARAMS IOWR'A', 0x75, struct misciosyncparam struct misciosyncparam void parain; unsigned int parasizein; void paraout;...

Huawei Mate7 and P8 HIFI Driver Denial of Service Vulnerability

Huawei Mate 7 and P8 are both smartphone products from Huawei, China.HIFI driver is one of the HIFI sound drivers. A security vulnerability in the HIFI driver of the Huawei Mate 7 and P8 allows remote attackers to conduct denial-of-service attacks by exploiting the vulnerability...

CVE-2015-8088

Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 befo...

Heap overflow

Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 befo...

CVE-2015-8088

CVE-2015-8088 is a heap-based buffer overflow in the Huawei Mate7/Mate 7 and P8 series HIFI driver (HIFI_MISC). The PoC details and linked documents describe exploitation via a crafted application triggering a heap overflow in the misc_io_sync_param handling, leading to denial of service (reboot)...