Out-of-bounds

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds memory access vulnerability due to the lack of parameter validation. An attack...

Authentication flaw

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the...

Buffer overflow

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends ...

Design/Logic Flaw

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any...

Buffer overflow

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

Code injection

The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot...

Buffer overflow

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends ...

Buffer overflow

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify...

Authorization

Warsaw Huawei Smart phones with software of versions earlier than Warsaw-AL00C00B180, versions earlier than Warsaw-TL10C01B180 have a permission control vulnerability. Due to improper authorization on specific processes, an attacker with the root privilege of a mobile Android system can exploit...

Design/Logic Flaw

The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to...

Out-of-bounds

Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service DoS vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given...

CVE-2017-8216

CVE-2017-8216 affects Huawei smartphones running Warsaw software versions older than Warsaw-AL00C00B180 and Warsaw-TL10C01B180. The root cause is improper authorization in specific processes, exposing a permission-control vulnerability that can let a user’s information be obtained by an attacker ...

CVE-2017-8203

CVE-2017-8203 concerns a Use-After-Free in the Bastet driver on Huawei Nova 2 and Nova 2 Plus devices. Affected software versions are those earlier than BAC-AL00C00B173 and PIC-AL00C00B173. The vulnerability allows an attacker—via tricking a user into installing a malicious app with high privileg...

CVE-2017-8186

The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot...

CVE-2017-8183

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any...

CVE-2017-8184

Huawei MTK platform on certain Huawei smartphones (pre Nice-AL00C00B160 / Nice-AL10C00B140) is affected by CVE-2017-8184, a memory access vulnerability that can leak sensitive information when a user installs a malicious app and sends a crafted parameter. The Huawei PSIRT advisory confirms the is...

CVE-2017-8175

The CVE-2017-8175 issue affects Huawei phones using the Bastet subsystem (models codenamed Vicky-AL00AC00B167, Victoria-AL00AC00B167, Warsaw-AL00C00B191 and related variants). Description: an insufficient input validation due to lack of parameter validation allows an attacker to trick a user into...

CVE-2017-8179

The CVE-2017-8179 entry describes a buffer overflow in the MTK camera driver used by Huawei smartphones with software versions earlier than Nice-AL00C00B155. The vulnerability arises from insufficient input verification in the driver, enabling a user-tricked malicious app with privileges to send ...

CVE-2017-8172

Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service DoS vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given...

CVE-2017-8170

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone,...