NSA Warns Smartphones Leak Location Data

Mobile devices expose location data in more ways than most people know, and turning off services such as Find My Phone, Wi-Fi and Bluetooth can help mitigate tracking, but are no silver bullet that prevents a third party from tracking users. That’s advice shared by U.S. top spy division, the...

Security Advisory - Improper Authentication Vulnerability in Several Smartphones

There is an improper authentication vulnerability in several smartphones. The system does not properly sign certain encrypted file, the attacker should gain the key used to encrypt the file, successful exploit could cause certain file be forged. Vulnerability ID: HWPSIRT-2019-10020 This...

CVE-2020-9249

CVE-2020-9249 affects Huawei P30 smartphones with versions earlier than 10.1.0.160 (C00E160R2P11). The root cause is a module that does not properly handle malformed messages, leading to a memory leak and resulting denial of service. The documented impact is a partial availability loss (DoS). Rem...

New ‘BadPower’ attack on fast chargers can burn your smartphone

By Zara Khan BadPower was tested on 35 fast charging models out of 234 available in... This is a post from HackRead.com Read the original post: New 'BadPower' attack on fast chargers can burn your smartphone...

CVE-2020-9258

Huawei P30 smartphones running versions earlier than 10.1.0.135 (C00E135R2P11) are affected by CVE-2020-9258, an improper input verification vulnerability. The issue stems from an attribution in a module not being set correctly and missing verification, allowing local attackers to inject maliciou...

CVE-2020-9260

CVE-2020-9260 affects Huawei P30 and P30 Pro smartphones with versions before 10.1.0.123 (P30) or before 10.1.0.160 (P30 Pro). The vulnerability arises from insecure default Wi‑Fi configuration, enabling information disclosure when an attacker crafts a Wi‑Fi hotspot. Connected records indicate Hu...

Security Advisory - Improper Input Verification Vulnerability in Huawei Smartphone

There is an improper input verification vulnerability in Huawei smartphone. An attribution in a module is not set correctly and some verification is lacked. Attackers with local access can exploit this vulnerability by injecting malicious fragment. This may lead to user information leak...

Pig in a poke: smartphone adware

Our support team continues to receive more and more requests from users complaining about intrusive ads on their smartphones from unknown sources. In some cases, the solution is quite simple. In others, the task is far harder: the adware plants itself in the system partition, and trying to get ri...

Is It Legal for Cops to Force You to Unlock Your Phone?

Because the relevant Supreme Court precedents predate the smartphone era, the courts are divided on how to apply the Fifth Amendment...

CVE-2020-1813

CVE-2020-1813 affects Huawei P30 smartphones with versions earlier than 10.1.0.135 (C00E135R2P11). The issue is an improper authentication vulnerability related to a specific interface, allowing access without authentication under certain conditions and enabling unauthorized operations. Public so...

CVE-2020-1833

CVE-2020-1833 affects Huawei/Honor 9X smartphones with versions earlier than 9.1.1.172 (C00E170R8P1). A logic error in the clock handling logic allows an attacker to access clock information without unlocking the phone after performing a sequence of crafted operations before unlock. Impact is lim...

Authentication flaw

Huawei P20 smartphones with versions earlier than 10.0.0.156C00E156R1P4 have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the...

CVE-2020-9073

Huawei P20 smartphones with versions earlier than 10.0.0.156C00E156R1P4 have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the...

This Week in Security News: 7 Tips for Security Pros Patching in a Pandemic and Coinminer, DDoS Bot Attack Docker Daemon Ports

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about a malicious cryptocurrency miner and Distributed Denial of Service DDoS bot that targets open Docker daemon ports. Also, learn...

CVE-2019-5302

The CVE-2019-5302 entry concerns two denial-of-service vulnerabilities in Huawei smartphones triggered by specially crafted TD-SCDMA messages sent from a rogue base station. The issue arises from insufficient input validation during message parsing, potentially causing device abnormal behavior. T...

Input validation

Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205C00E202R7P2 have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal...

CVE-2020-1880

The CVE-2020-1880 vulnerability affects Huawei smartphone Lion-AL00C on versions earlier than 10.0.0.205(C00E202R7P2). An attacker could cause a denial of service by delivering a specially crafted file due to insufficient input validation when executing the file, potentially leading to device abn...

CVE-2020-1880

Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205C00E202R7P2 have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal...

CVE-2020-1806

CVE-2020-1806 affects Huawei Honor V10 smartphones with versions earlier than 10.0.0.156 (C00E156R2P4). The vulnerability stems from a driver that does not sufficiently validate certain parameters, causing several bytes out-of-bounds read. Potential impact includes information disclosure or servi...

CVE-2020-1805

Huawei Honor V10 smartphones with versions earlier than 10.0.0.156 (C00E156R2P4) are affected by out-of-bounds read vulnerabilities in a driver that fails to validate certain parameters, potentially causing information disclosure or service abnormality. CVE-2020-1805 is the second of three relate...