Authorization

Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a permission control vulnerability due to improper authorization configuration on specific device information...

CVE-2017-15307

CVE-2017-15307 affects Huawei Honor 8 devices (versions earlier than FRD-L04C567B389 and FRD-L14C567B389). Root cause: improper authorization configuration on specific device information leading to a permission control vulnerability. Impact: potential unauthorized modification of device informati...

Jack of all trades

Nowadays, it's all too easy to end up with malicious apps on your smartphone, even if you're using the official Google Play app store. The situation gets even worse when you go somewhere other than the official store – fake applications, limited security checks, and so on. However, the spread of...

Google Detects and Boots Tizi Spyware Off Google Play

The Google Play Protect team said it identified a new strain of Android spyware called Tizi found inside several apps previously available via the Google Play marketplace. The recent discovery triggered a wider investigation by Google who said apps infected by the Tizi malware date back to 2015...

CVE-2017-8212

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8184

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any...

Buffer overflow

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify...

Design/Logic Flaw

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

Authentication flaw

Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a phone activation bypass vulnerability. Successful...

Buffer overflow

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone,...

Buffer overflow

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8214

CVE-2017-8214 affects Huawei/Honor smartphones (multiple models listed) with firmware versions older than a set of FRD/KNT/Stanford/Duke Picasso Barca EVA variants. The root cause is an unlock-code-verification bypass that lets an attacker with root privileges bypass unlock checks and unlock the ...

CVE-2017-2696

The emergdata driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter t...

CVE-2017-2734

P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service DoS vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a large numbe...

CVE-2017-8209

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-2697

The CVE-2017-2697 entry describes a buffer overflow in the Goldeneye driver used by Huawei smartphones (e.g., models such as GT3, Honor series, P9 Lite, Y6 II) and potentially other devices listed in the record. Root-privilege access is required for an attacker to induce a user to install a malic...

CVE-2017-2706

CVE-2017-2706 affects Huawei Mate 9 (software MHA-AL00AC00B125) via a directory traversal vulnerability in the Push module. The root cause is that the decompression process does not verify the file name, allowing traversal to system directories and enabling an attacker to replace files and impact...

CVE-2017-8161

CVE-2017-8161 affects Huawei EVA-L09 smartphones. The FRP bypass vulnerability occurs on devices running software older than the listed builds (EVA-L09C25B150CUSTC25D003, EVA-L09C440B140, EVA-L09C464B361, EVA-L09C675B320CUSTC675D004). During FRP re-configuration, an attacker can use the Swype inp...

CVE-2017-8145

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the...

CVE-2017-2705

CVE-2017-2705 affects Huawei P9 smartphones and allows an unauthenticated attacker to bypass phone activation and reach the settings page. Affected devices are Huawei P9 models with versions earlier than EVA-AL10C00B365, EVA-AL00C00B365, EVA-CL00C92B365, EVA-DL00C17B365, and EVA-TL00C01B365. The ...