CVE-2018-9558

In rwt2thandletlvdetect of rwt2tndef.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC kernel with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Version...

CVE-2018-9518

In nfcllcpbuildsdreqtlv of llcpcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel...

CVE-2018-7773

The vulnerability exists within processing of nfcserver.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the sessionid input parameter...

CVE-2018-7930

The Near Field Communication NFC module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366C567 has an information leak vulnerability due to insufficient validation on data transfer requests. When an affected mobile phone sends files to an attacker's mobile phone using the...

Input validation

The Near Field Communication NFC module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366C567 has an information leak vulnerability due to insufficient validation on data transfer requests. When an affected mobile phone sends files to an attacker's mobile phone using the...

CVE-2018-7930

CVE-2018-7930 affects Huawei Mate 9 smartphones with the NFC module prior to MHA-L29B 8.0.0.366 (C567). The vulnerability arises from insufficient validation of data transfer requests in the NFC component, allowing an attacker to obtain arbitrary files from the user’s device when the user’s phone...

CVE-2018-7930

The Near Field Communication NFC module in Mate 9 Huawei mobile phones with the versions before MHA-L29B 8.0.0.366C567 has an information leak vulnerability due to insufficient validation on data transfer requests. When an affected mobile phone sends files to an attacker's mobile phone using the...

Security Advisory - Information Leak Vulnerability in the NFC Module of Some Huawei Mobile Phones

There is an information leak vulnerability in the Near Field Communication NFC module of some Huawei mobile phones due to insufficient validation on data transfer requests. When an affected mobile phone sends files to an attacker's mobile phone using the NFC function, the attacker can obtain...

CVE-2017-13293

In the nfchcicmdreceived function of core.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

You down with P2P? 10 tips to secure your mobile payment app

If you look at the figures, you cannot deny that the eCommerce industry is steadily growing. More and more people are doing their shopping online, not only for products and services geared toward the use of technologies and the Internet, but also for items previously only found in brick and morta...

CVE-2017-17280

NFC Near Field Communication module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability. The attacker has to trick a user to do some specific operations and then craft the NFC message to exploit this vulnerability. Successful exploit will cause some informatio...

CVE-2017-17225

The Near Field Communication NFC module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340aC00 has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobi...

CVE-2017-17280

NFC Near Field Communication module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability. The attacker has to trick a user to do some specific operations and then craft the NFC message to exploit this vulnerability. Successful exploit will cause some informatio...

Buffer overflow

The Near Field Communication NFC module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340aC00 has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobi...

Information disclosure

NFC Near Field Communication module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability. The attacker has to trick a user to do some specific operations and then craft the NFC message to exploit this vulnerability. Successful exploit will cause some informatio...

CVE-2017-17280

NFC Near Field Communication module in Huawei mobile phones with software LON-AL00BC00 has an information leak vulnerability. The attacker has to trick a user to do some specific operations and then craft the NFC message to exploit this vulnerability. Successful exploit will cause some informatio...

CVE-2017-17225

The Near Field Communication NFC module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340aC00 has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobi...

CVE-2017-17280

CVE-2017-17280 describes an information-disclosure vulnerability in the NFC module of Huawei mobile phones (noted for a model like LON-AL00BC00). The vulnerability requires the attacker to induce the user to perform specific actions and then craft an NFC message to trigger the leak. Multiple conn...

CVE-2017-17225

CVE-2017-17225 maps to a buffer overflow in the NFC module of Huawei Mate 9 Pro devices running versions prior to LON-AL00B 8.0.0.340a(C00). The root cause is lack of input validation in the NFC stack, enabling an attacker to inject data via an NFC reader or similar device, potentially causing a ...

Security Advisory - Information Leak Vulnerability in Some Huawei Products

There is an information leak vulnerability in the NFC Near Field Communication module of some Huawei mobile phones. The attacker has to trick a user to do some specific operations and then craft the NFC message to exploit this vulnerability. Successful exploit will cause some information leak...