CVE-2017-17161

The 'Find Phone' function in some Huawei smart phones with software earlier than Duke-L09C10B186 versions, earlier than Duke-L09C432B187 versions, earlier than Duke-L09C636B186 versions has an authentication bypass vulnerability. Due to improper authentication realization in the 'Find Phone'...

CVE-2017-17285

Bluetooth module in some Huawei mobile phones with software LON-AL00BC00B229 and earlier versions has a buffer overflow vulnerability. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth AVDTP/AVCTP messages after successful paring, causing buffer overflow...

CVE-2017-17159

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System InformationSI messages to the smart phone within...

CVE-2017-17159

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System InformationSI messages to the smart phone within...

Authentication flaw

The 'Find Phone' function in Huawei Honor V9 play smart phones with versions earlier than Jimmy-AL00AC00B135 has an authentication bypass vulnerability. Due to improper authentication realization in the 'Find Phone' function. An attacker may exploit the vulnerability to bypass the 'Find Phone'...

Input validation

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System InformationSI messages to the smart phone within...

CVE-2017-15351

CVE-2017-15351 describes an authentication bypass in the Huawei Honor V9 Play Find Phone function for versions earlier than Jimmy-AL00AC00B135. The root cause is improper authentication in the Find Phone feature, allowing an attacker to bypass the function and use the phone normally. The vulnerab...

CVE-2017-17285

Bluetooth module in some Huawei mobile phones with software LON-AL00BC00B229 and earlier versions has a buffer overflow vulnerability. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth AVDTP/AVCTP messages after successful paring, causing buffer overflow...

CVE-2017-17161

The CVE-2017-17161 vulnerability affects Huawei smartphones with the Find Phone function, before Duke-L09C10B186, Duke-L09C432B187, and Duke-L09C636B186 firmware versions. The issue is an authentication bypass caused by improper authentication in the Find Phone feature, allowing an attacker to by...

CVE-2017-17159

Some Huawei smart phones with software of NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535 have a DoS vulnerability due to insufficient input validation. An unauthenticated attacker could send malformed System InformationSI messages to the smart phone within...

CVE-2017-17159

CVE-2017-17159 affects several Huawei smartphones (models including NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386SP01, NTS-AL00C00B535) where the DoS arises from insufficient input validation of System Information (SI) messages. An unauthenticated attacker within radio range ...

CVE-2017-17285

CVE-2017-17285 maps to a Huawei Bluetooth module buffer overflow vulnerability. Affected devices include Huawei mobile phones with software versions such as LON-AL00BC00B229 and earlier. The root cause is insufficient input validation in the Bluetooth AVDTP/AVCTP handling after pairing, allowing ...

CVE-2017-15347

CVE-2017-15347 affects Huawei Mate 9 Pro on software versions earlier than LON-AL00BC00B235. The issue is a use-after-free vulnerability that allows a malicious app, installed by a user, to access memory after it has been freed, potentially causing the device to crash. This is a local vulnerabili...

Security Advisory - Out-of-Bounds Memory Access Vulnerability in the GPU Driver of Huawei Mobile Phones

There is a out-of-bounds memory access vulnerability in the GPU driver of some Huawei smart phones due to the input parameters validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can call the driver with special parameter and cause...

New adware attack bombard phones & prevent users from disabling ads

By Waqas It is just another day for Android users who are This is a post from HackRead.com Read the original post: New adware attack bombard phones prevent users from disabling ads...

Spectre and Meltdown Attacks

After a week or so of rumors, everyone is now reporting about the Spectre and Meltdown attacks against pretty much every modern processor out there. These are side-channel attacks where one process can spy on other processes. They affect computers where an untrusted browser window can execute cod...

CVE-2017-15316

The CVE-2017-15316 issue is a memory double free vulnerability in Huawei’s Mate 9 Mate 9 Pro GPU driver (MHA-AL00B 8.0.0.334(C00) / LON-AL00B 8.0.0.334(C00)). The flaw exists in the Mali GPU driver and can be triggered when a user installs a malicious app calling a specific API, potentially crash...

Coremail's Android version suffers from an override access vulnerability.

Coremail Lobbyist Email System for Android is a mobile email app. There is an over-authorized access vulnerability in the "Personal Details" page of Coremail Lonker Mailbox System for Android. It allows attackers to utilize the vulnerability to modify the list field to query the name, cell phone...

Security Advisory - Authentication Bypass Vulnerability in Some Huawei Smart Phones

Some Huawei smart phones have an authentication bypass vulnerability due to the improper design of a component. An attacker who get a user's smart phone can execute specific operation, and delete the fingerprint of the phone without authentication. Vulnerability ID: HWPSIRT-2017-10094 This...

Security Advisory - Information Leak Vulnerability in Some Huawei Smart Phones

There is a information leak vulnerability in the date service proxy implementation of some Huawei smart phones. An attacker may trick a user into installing a malicious application and application can exploit the vulnerability to get kernel date, which may cause sensitive information leak...