PT-2017-18151

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 versions prior to MHA-AL00BC00B221 Huawei Mate 9 Pro versions prior to LON-AL00BC00B221 Description The issue is related to a use after free UAF vulnerability in the Trusted Execution Environment TEE module driver. An attacker ca...

CVE-2017-8142: Use After Free

The Trusted Execution Environment TEE module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and...

PT-2017-15488

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 version MHA-AL00AC00B125 Description The issue is related to a denial of service DoS that can be triggered by a malicious application. An attacker could exploit this by tricking a user into installing such an application, which c...

PT-2017-15493

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 smartphones with software MHA-AL00AC00B125 Description The issue is related to a directory traversal vulnerability in the Push module. This occurs because the system does not verify the file name during decompression, allowing...

PT-2017-15503

Name of the Vulnerable Software and Affected Versions Mate 9 versions earlier than MHA-AL00BC00B173 Description The camerafs driver has a buffer overflow issue. An attacker can trick a user into installing a malicious application with system privileges, which then sends a specific parameter to th...

CVE-2017-2716: Improper Restriction of Operations within the Bounds of a Memory Buffer

The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious application which has the system privilege of the Android system and sends a specific parameter to the driver of the smart phone, causing a...

CVE-2017-2707: Download of Code Without Integrity Check

Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message...

CVE-2017-2701: Insufficient Verification of Data Authenticity

Mate 9 with software MHA-AL00AC00B125 has a denial of service DoS vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting message from the application, it could be exploited to cause some functions of system unavailable...

PT-2017-15494

Name of the Vulnerable Software and Affected Versions Huawei Mate 9 smartphones with software MHA-AL00AC00B125 Description The issue allows for privilege escalation in the Push module. An attacker can trick a user into saving rich media in a message on the smartphone, potentially exploiting this ...

CVE-2017-2706: Improper Limitation of a Pathname to a Restricted Directory

Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service...

Huawei Mate 9 Information Disclosure Vulnerability

Huawei Mate 9 is a smartphone from Huawei. Huawei Mate 9 has an information leakage vulnerability in the implementation of the CMA mechanism, which can be exploited by an attacker to leak sensitive information by inducing a user to install a malicious mobile application...

Memory corruption

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

CVE-2015-4421

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

CVE-2015-4422

The TEEOS module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service memory corruption via a crafted application...

CVE-2015-4421

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

CVE-2015-4422

The TEEOS module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service memory corruption via a crafted application...

CVE-2015-4422

CVE-2015-4422 concerns Huawei Mate 7 devices (Mate7-TL10) in the TEEOS module. A local attacker with root permissions can escalate privileges or trigger memory corruption leading to denial of service via a crafted app. The affected product is described as the Mate 7 with TEEOS, before the patch v...

CVE-2015-4421

The CVE-2015-4421 issue affects Huawei Mate 7tzdriver and TEEOS. A flawed input check in the /dev/tc_ns_client kernel interface allows a user-space process to influence trusted execution environment calls, enabling local privilege escalation or memory corruption that can lead to a denial of servi...

CVE-2015-4421: Improper Restriction of Operations within the Bounds of a Memory Buffer

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

CVE-2015-4422: Improper Restriction of Operations within the Bounds of a Memory Buffer

The TEEOS module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service memory corruption via a crafted application...