CVE-2017-17326

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of...

CVE-2017-17328

Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause...

CVE-2017-17327

Huawei smartphones with software of MHA-AL00AC00B125 have an improper resource management vulnerability. The software does not properly manage the resource when do device register operation. An attacker tricks the user who has root privilege to install a crafted application, successful exploit...

CVE-2017-17324

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks...

CVE-2017-17326: Undefined Security Weakness

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of...

CVE-2017-8164

Some Huawei smart phones with software EVA-L09C34B142; EVA-L09C40B196; EVA-L09C432B210; EVA-L09C440B138; EVA-L09C464B150; EVA-L09C530B127; EVA-L09C55B190; EVA-L09C576B150; EVA-L09C635B221; EVA-L09C636B193; EVA-L09C675B130; EVA-L09C688B143; EVA-L09C703B160; EVA-L09C706B145; EVA-L09GBRC555B171;...

CVE-2017-15340

Huawei smartphones with software of TAG-AL00C92B168 have an information disclosure vulnerability. An attacker tricks the user to install a crafted application, this application simulate click action to back up data in a non-encrypted way using an Android assist function. Successful exploit could...

CVE-2017-15345

Huawei Smartphones with software LON-L29DC721B186 have a denial of service vulnerability. An attacker could make an loop exit condition that cannot be reached by sending the crafted 3GPP message. Successful exploit could cause the device to reboot...

CVE-2017-15345

Huawei LON-L29D smartphones (models including LON-L29DC721B186) contain a denial-of-service vulnerability caused by an unexitable loop driven by crafted 3GPP messages, which can lead to device reboot. The issue is documented across multiple sources (NVD/NVD-derived records, CNVD, CVE-IDs, and Hua...

Pyeongchang 2018: Staying Cyber Safe during the Olympics

As the 2018 Olympic Games in Pyeongchang approach, NCCIC/US-CERT reminds travelers to be aware of cybersecurity risks. At high-profile events, cyber activists may take advantage of the large audience to spread their message. Cyber criminals may attempt to steal personally identifiable information...

smartphone-star.de XSS vulnerability

Open Bug Bounty ID: OBB-550152 Description| Value ---|--- Affected Website:| smartphone-star.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Code injection

In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone...

CVE-2017-17860

In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone...

CVE-2017-17860

In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone...

CVE-2017-17860

In Samsung Gear products, Bluetooth link key is updated to the different key which is same with attacker's link key. It can be attacked without user's intention only if attacker can reveal the Bluetooth address of target device and paired user's smartphone...

OnePlus denies checkout page hack amid credit card fraud reports

By Waqas OnePlus, a Shenzhen based Chinese smartphone manufacturer has denied that This is a post from HackRead.com Read the original post: OnePlus denies checkout page hack amid credit card fraud reports...

XKCD's Smartphone Security System

Funny...

FBI Director Calls Smartphone Encryption an ‘Urgent Public Safety Issue’

The debate over the government’s authority to access private encrypted data on digital devices was amplified Tuesday when the Federal Bureau of Investigation Director Christopher Wray called unbreakable encryption an “urgent public safety issue.” Wray said FBI was locked out of 7,775 devices in t...

Smartphone sensors can leak the four-digit PIN code to hackers

By Uzair Amir Smartphones have remained the primary domain of experimentation for cybercriminals This is a post from HackRead.com Read the original post: Smartphone sensors can leak the four-digit PIN code to hackers...

Double free

The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334C00 and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334C00 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application ca...