CVE-2020-9144

There is a heap overflow vulnerability in some Huawei smartphone, attackers can exploit this vulnerability to cause heap overflows due to improper restriction of operations within the bounds of a memory buffer...

CVE-2020-9144

CVE-2020-9144 maps to a heap overflow in Huawei Emui and Honor Magic Ui (CNVD-2022-52826). The issue arises from improper restriction of operations within memory buffer bounds, affecting Android-based Emui/Magic Ui builds. Connected records cite a buffer/heap overflow, with Red Hat/NVD entries mi...

How Law Enforcement Gets Around Your Smartphone's Encryption

New research has dug into the openings that iOS and Android security provide for anyone with the right tools...

Security Advisory - Out-of-Bound Read and Write Vulnerability in Huawei Product

There is an out-of-bound read and write vulnerability in Huawei smartphone. A module dose not verify the input sufficiently. Attackers can exploit this vulnerability by modifying some configuration to cause out-of-bound read and write, causing denial of service. Vulnerability ID: HWPSIRT-2020-051...

Security Advisory - Resource Management Errors Vulnerability in Huawei Smartphone Product

There is a resource management errors vulnerability in Huawei smartphone product. Local attackers construct broadcast message for some application, causing this application to send this broadcast message and impact the customer's use experience. Vulnerability ID: HWPSIRT-2020-06101 This...

CVE-2020-9125

There is an out-of-bound read vulnerability in huawei smartphone Mate 30 versions earlier than 10.1.0.156 C00E155R7P2. An attacker with specific permission can exploit this vulnerability by sending crafted packet with specific parameter to the target device. Due to insufficient validation of the...

CVE-2020-9125

CVE-2020-9125 concerns Huawei Mate 30 devices prior to version 10.1.0.156 (C00E155R7P2). The issue is an out-of-bounds read caused by insufficient validation of a parameter in a crafted packet, allowing an attacker with certain permissions to trigger abnormal device behavior. Affected software: H...

Huawei Taurus-AL00A Resource Management Error Vulnerability

Huawei Taurus-AL00A is a smartphone from Huawei of China.Huawei Taurus-AL00A is vulnerable to a resource management error. A module fails to properly process a message, and a function references freed memory. An attacker could use this vulnerability to trick a user into running a carefully...

Security Advisory - Resource Management Errors Vulnerability in Huawei Smartphone Product

There is a resource management errors vulnerability in Huawei smartphone product. Local attackers construct malicious application files, causing system applications to run abnormally. Vulnerability ID: HWPSIRT-2020-06020 This vulnerability has been assigned a Common Vulnerabilities and Exposures...

Security Advisory - Out Of Bound Read Vulnerability in Huawei Smartphone

There is an out-of-bound read vulnerability in huawei smartphone Mate 30. An attacker with specific permission can exploit this vulnerability by sending crafted packet with specific parameter to the target device. Due to insufficient validation of the parameter, successful exploit can cause the...

Security Advisory - Denial of Service Vulnerability in Huawei Smartphone

There is a denial of service vulnerability in some Huawei smartphones. Due to the improper processing of received abnormal messages, remote attackers may exploit this vulnerability to cause a denial of service DoS on the specific module. Vulnerability ID: HWPSIRT-2020-06018 This vulnerability has...

Smartphones are not the problem with MFA security

We've recently seen big attacks play out on prominent technology companies despite their use of smartphone-based multi-factor authentication. These attacks are real, they do happen, and it appears that even the smartphone cannot protect us anymore. While this conclusion may be tempting, it actual...

Design/Logic Flaw

Medtronic MyCareLink Smart 25000 all versions contain an authentication protocol vuln where the method used to auth between MCL Smart Patient Reader and MyCareLink Smart mobile app is vulnerable to bypass. This vuln allows attacker to use other mobile device or malicious app on smartphone to auth...

CVE-2020-25183 Medtronic MyCareLink Smart Improper Authentication

Medtronic MyCareLink Smart 25000 contains an authentication protocol vulnerability where the method used to authenticate between the MCL Smart Patient Reader and the Medtronic MyCareLink Smart mobile app is vulnerable to bypass. This vulnerability enables an attacker to use another mobile device ...

Google Android Input Validation Error Vulnerability

Google Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA. Google Android Pixel has a security vulnerability, there is currently no information about this vulnerability, please stay tuned to CNNVD or the manufacturer's announcement...

Security of Millions At Risk Due to Unpatched Android Apps

By Deeba Ahmed High-profile Android apps still aren't using the latest version of Google app's update library, jeopardizing hundreds of millions of smartphone users' security. This is a post from HackRead.com Read the original post: Security of Millions At Risk Due to Unpatched Android Apps...

Security Advisory - Improper Buffer Operation Restrictions Vulnerability on Huawei Smartphone

There is a vulnerability of improper buffer operation in Huawei smartphone. Due to improper restrictions, local attackers with high privileges can exploit the vulnerability to cause system heap overflow. Vulnerability ID: HWPSIRT-2020-08183 This vulnerability has been assigned a Common...

Google makes app to lock devices if users default on payment

By Sudais Asif Google ash released an app that aims at locking the devices of users who default on their smartphone financing payments. This is a post from HackRead.com Read the original post: Google makes app to lock devices if users default on payment...

Security Advisory - Improper Buffer Operation Restrictions Vulnerability on Huawei Smartphone

There is a vulnerability of improper buffer operation in Huawei smartphone. Due to improper restrictions, local attackers with high privileges can exploit the vulnerability to cause system heap overflow. Vulnerability ID: HWPSIRT-2020-08183 This vulnerability has been assigned a Common...

IMSI-Catchers from Canada

Gizmodo is reporting that Harris Corp. is no longer selling Stingray IMSI-catchers and, presumably, its follow-on models Hailstorm and Crossbow to local governments: L3Harris Technologies, formerly known as the Harris Corporation, notified police agencies last year that it planned to discontinue...