CVE-2017-2726

CVE-2017-2726 affects Huawei Bastet on P10 Plus and P10, prior to VKY-AL00C00B123/VTR-AL00C00B123 builds. Description and CNVD/Huawei advisories indicate a buffer overflow in Bastet caused by lack of parameter checking, exploitable when root Android is present and a user installs a malicious app....

CVE-2017-8141

The CVE-2017-8141 entry concerns a memory double-free vulnerability in the Touch Panel (TP) driver of Huawei P10 Plus smartphones with software versions prior to VKY-AL00C00B153. Exploitation requires root privileges and tricking a user into installing a malicious app; the app can spawn multiple ...

CVE-2017-8146

CVE-2017-8146 affects Huawei P10/P10 Plus call module. The vulnerability allows a crafted malicious app to send specific parameters to the call module, causing denial of service and crashing the call and data communication processes. Affected software versions include prior builds before VTR-AL00...

CVE-2017-8149

CVE-2017-8149 affects Huawei P10 and P10 Plus boot loaders, where lack of parameter validation causes out-of-bounds memory access. An attacker with root privileges on Android could lure a user to install a malicious app, enabling the app to modify data and trigger a buffer overflow on the next re...

CVE-2017-8150

The CVE-2017-8150 entry affects Huawei P10 and P10 Plus bootloaders. The vulnerability is an arbitrary memory write caused by lack of parameter validation in boot loaders for versions prior to Victoria-L09AC605B162, Victoria-L29AC605B162, and Vicky-L29AC605B162. An attacker with root access on An...

CVE-2017-8172

The CVE-2017-8172 issue affects Huawei Vicky/Victoria series (P10 Plus and P10) with earlier VKY-AL00C00B157 and VTR-AL00C00B157 revisions. The root cause is in the isub service where crafted input parameters to a specific interface enable an out-of-bounds array access, triggering a device restar...

CVE-2017-2725

The CVE-2017-2725 issue affects Huawei Bastet on P10/P10 Plus (and similar models) with software older than VKY-AL00C00B123 and VTR-AL00C00B123. The root cause is a buffer overflow in Bastet due to insufficient parameter validation, allowing a user to be tricked into installing a malicious app. U...

CVE-2017-2724

The CVE-2017-2724 entry refers to a local buffer overflow in Huawei’s Bastet component affecting P10 Plus and P10 smartphones with software prior to VKY-AL00C00B123 and VTR-AL00C00B123. Root-privileged Android attackers could coerce a user into installing a malicious app, enabling data modificati...

CVE-2017-8145

CVE-2017-8145 affects Huawei P10 and P10 Plus call module. The DoS condition exists in software versions before specific builds (VTR-AL00C00B167, VTR-TL00C01B167, VKY-AL00C00B167, VKY-TL00C01B167). An attacker can trick a user into installing a malicious app that sends crafted parameters to the c...

PT-2017-18154

Name of the Vulnerable Software and Affected Versions P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167 P10 and P10 Plus smartphones with software versions before VTR-TL00C01B167 P10 and P10 Plus smartphones with software versions before VKY-AL00C00B167 P10 and P10 Plus...

PT-2017-18218

Name of the Vulnerable Software and Affected Versions Huawei Honor 8 versions earlier than FRD-AL00C00B391 Huawei Honor V8 versions earlier than FRD-DL00C00B391 Huawei Honor 9 versions earlier than KNT-AL10C00B391 Huawei Honor 9 versions earlier than KNT-AL20C00B391 Huawei Honor 9 versions earlie...

PT-2017-15511

Name of the Vulnerable Software and Affected Versions Bastet in P10 Plus and P10 smart phones versions earlier than VKY-AL00C00B123 Bastet in P10 Plus and P10 smart phones versions earlier than VTR-AL00C00B123 Description The issue is related to a buffer overflow. An attacker with root privilege ...

PT-2017-15512

Name of the Vulnerable Software and Affected Versions Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions Bastet in P10 Plus and P10 smart phones with software earlier than VTR-AL00C00B123 versions Description The issue is related to a buffer overflow. An...

PT-2017-15513

Name of the Vulnerable Software and Affected Versions Bastet in P10 Plus and P10 smart phones versions earlier than VKY-AL00C00B123 Bastet in P10 Plus and P10 smart phones versions earlier than VTR-AL00C00B123 Description The issue is related to a buffer overflow. An attacker with root privilege ...

PT-2017-18150

Name of the Vulnerable Software and Affected Versions P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 Description The issue concerns a memory double free vulnerability in the Touch Panel driver. An attacker with root privilege of the Android system can trick a user into...

PT-2017-18153

Name of the Vulnerable Software and Affected Versions Honor 5A versions before CAM-L03C605B143CUSTC605D003 Honor 8 Lite versions before Prague-L03C605B161 Honor 8 Lite versions before Prague-L23C605B160 Mate9 versions before MHA-AL00C00B225 Mate9 versions before LON-AL00C00B225 P10 versions befor...

PT-2017-18155

Name of the Vulnerable Software and Affected Versions P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167 P10 and P10 Plus smartphones with software versions before VTR-TL00C01B167 P10 and P10 Plus smartphones with software versions before VKY-AL00C00B167 P10 and P10 Plus...

PT-2017-18159

Name of the Vulnerable Software and Affected Versions Huawei P10 versions before Victoria-L09AC605B162 Huawei P10 versions before Victoria-L29AC605B162 Huawei P10 Plus versions before Vicky-L29AC605B162 Description The issue is related to an arbitrary memory write vulnerability in the boot loader...

PT-2017-18178

Name of the Vulnerable Software and Affected Versions Huawei P10 Plus and P10 smartphones with versions earlier than VKY-AL00C00B157 Huawei P10 smartphones with versions earlier than VTR-AL00C00B157 Description The issue is related to a denial of service DoS vulnerability in the Isub service. An...

PT-2017-18158

Name of the Vulnerable Software and Affected Versions Huawei P10 versions before Victoria-L09AC605B162 Huawei P10 versions before Victoria-L29AC605B162 Huawei P10 Plus versions before Vicky-L29AC605B162 Description The issue is caused by a lack of parameter validation, leading to an out-of-bounds...