PT-2020-20533

Name of the Vulnerable Software and Affected Versions Huawei smartphone Taurus-AL00B versions prior to 10.1.0.126C00E125R5P3 Description The issue is related to a user after free vulnerability, where a module lacks lock protection. This can be exploited by launching a specific request, potentiall...

Security Advisory - Use after Free Vulnerability in Huawei Smartphone

There is a user after free vulnerability in Huawei smartphone. A module is lack of lock protection. Attackers can exploit this vulnerability by launching specific request. This could compromise normal service of the affected device. Vulnerability ID: HWPSIRT-2020-03123 This vulnerability has been...

Smart Lock Vulnerability

Yet another Internet-connected door lock is insecure: Sold by retailers including Amazon, Walmart, and Home Depot, U-Tec's $139.99 UltraLoq is marketed as a "secure and versatile smart deadbolt that offers keyless entry via your Bluetooth-enabled smartphone and code." Users can share temporary...

NSA Warns Smartphones Leak Location Data

Mobile devices expose location data in more ways than most people know, and turning off services such as Find My Phone, Wi-Fi and Bluetooth can help mitigate tracking, but are no silver bullet that prevents a third party from tracking users. That’s advice shared by U.S. top spy division, the...

Security Advisory - Improper Authentication Vulnerability in Several Smartphones

There is an improper authentication vulnerability in several smartphones. The system does not properly sign certain encrypted file, the attacker should gain the key used to encrypt the file, successful exploit could cause certain file be forged. Vulnerability ID: HWPSIRT-2019-10020 This...

CVE-2020-9249

CVE-2020-9249 affects Huawei P30 smartphones with versions earlier than 10.1.0.160 (C00E160R2P11). The root cause is a module that does not properly handle malformed messages, leading to a memory leak and resulting denial of service. The documented impact is a partial availability loss (DoS). Rem...

New ‘BadPower’ attack on fast chargers can burn your smartphone

By Zara Khan BadPower was tested on 35 fast charging models out of 234 available in... This is a post from HackRead.com Read the original post: New 'BadPower' attack on fast chargers can burn your smartphone...

CVE-2020-9258

Huawei P30 smartphones running versions earlier than 10.1.0.135 (C00E135R2P11) are affected by CVE-2020-9258, an improper input verification vulnerability. The issue stems from an attribution in a module not being set correctly and missing verification, allowing local attackers to inject maliciou...

CVE-2020-9260

CVE-2020-9260 affects Huawei P30 and P30 Pro smartphones with versions before 10.1.0.123 (P30) or before 10.1.0.160 (P30 Pro). The vulnerability arises from insecure default Wi‑Fi configuration, enabling information disclosure when an attacker crafts a Wi‑Fi hotspot. Connected records indicate Hu...

Security Advisory - Improper Input Verification Vulnerability in Huawei Smartphone

There is an improper input verification vulnerability in Huawei smartphone. An attribution in a module is not set correctly and some verification is lacked. Attackers with local access can exploit this vulnerability by injecting malicious fragment. This may lead to user information leak...

Pig in a poke: smartphone adware

Our support team continues to receive more and more requests from users complaining about intrusive ads on their smartphones from unknown sources. In some cases, the solution is quite simple. In others, the task is far harder: the adware plants itself in the system partition, and trying to get ri...

Is It Legal for Cops to Force You to Unlock Your Phone?

Because the relevant Supreme Court precedents predate the smartphone era, the courts are divided on how to apply the Fifth Amendment...

CVE-2020-1813

CVE-2020-1813 affects Huawei P30 smartphones with versions earlier than 10.1.0.135 (C00E135R2P11). The issue is an improper authentication vulnerability related to a specific interface, allowing access without authentication under certain conditions and enabling unauthorized operations. Public so...

CVE-2020-1833

CVE-2020-1833 affects Huawei/Honor 9X smartphones with versions earlier than 9.1.1.172 (C00E170R8P1). A logic error in the clock handling logic allows an attacker to access clock information without unlocking the phone after performing a sequence of crafted operations before unlock. Impact is lim...

Authentication flaw

Huawei P20 smartphones with versions earlier than 10.0.0.156C00E156R1P4 have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the...

CVE-2020-9073

Huawei P20 smartphones with versions earlier than 10.0.0.156C00E156R1P4 have an improper authentication vulnerability. The vulnerability is due to that when an user wants to do certain operation, the software insufficiently validate the user's identity. Attackers need to physically access the...

This Week in Security News: 7 Tips for Security Pros Patching in a Pandemic and Coinminer, DDoS Bot Attack Docker Daemon Ports

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about a malicious cryptocurrency miner and Distributed Denial of Service DDoS bot that targets open Docker daemon ports. Also, learn...

CVE-2019-5302

The CVE-2019-5302 entry concerns two denial-of-service vulnerabilities in Huawei smartphones triggered by specially crafted TD-SCDMA messages sent from a rogue base station. The issue arises from insufficient input validation during message parsing, potentially causing device abnormal behavior. T...

Input validation

Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205C00E202R7P2 have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal...

CVE-2020-1880

Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205C00E202R7P2 have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal...