CVE-2017-2726

CVE-2017-2726 affects Huawei Bastet on P10 Plus and P10, prior to VKY-AL00C00B123/VTR-AL00C00B123 builds. Description and CNVD/Huawei advisories indicate a buffer overflow in Bastet caused by lack of parameter checking, exploitable when root Android is present and a user installs a malicious app....

CVE-2017-2724

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify...

Huawei MHA-AL00A Reboot Vulnerability

Huawei MHA-AL00A is a smartphone product of Huawei, China.Bastet is one of the communication drivers. A security vulnerability exists in Bastet in versions prior to Huawei MHA-AL00A MHA-AL00BC00B231, which stems from a missing parameter check. An attacker can exploit the vulnerability by tricking...

Security Advisory - DOS Vulnerability in Bastet Component of Huawei Smart Phone

The Bastet of some Huawei mobile phones has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot. Vulnerability ID: HWPSIRT-2017-08155 This vulnerability has been...

Huawei Nova 2 Bastet Driver Elevation of Privilege Vulnerability

The Nova 2 and Nova 2 Plus are both smartphone devices from the Chinese company Huawei Huawei. An Use After Free UAF security vulnerability exists in the Bastet driver of the Huawei Nova 2 and Nova 2 Plus. An attacker can exploit the vulnerability for arbitrary code execution by tricking users in...

Security Advisory - Use After Free Vulnerability in Bastet Driver of Some Huawei Smart Phones

The Bastet Driver of some Huawei smart phones has a use after free UAF vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution. Vulnerability ID:...

Huawei Honor 9 Bastet Driver Buffer Overflow Vulnerability

Honor 9 is a smartphone from Chinese company Huawei Huawei. A buffer overflow vulnerability exists in the Huawei Honor 9 Bastet driver. An attacker induces a user to install a malicious application that has gained root privileges, and the application can exploit the vulnerability to send specific...

Huawei Honor 9 Bastet Driver Shaping Overflow Vulnerability (CNVD-2017-33817)

Honor 9 is a smartphone from Chinese company Huawei Huawei. A shaping overflow vulnerability exists in the Huawei Honor 9 Bastet driver. An attacker induces a user to install a malicious application that has gained root privileges, and the application can exploit the vulnerability to send specifi...

Huawei Mobile Product Input Validation Vulnerability

The Huawei Vicky-AL00A/Victoria-AL00A/Warsaw-AL00 is a smartphone from the Chinese company Huawei Huawei. An input validation vulnerability exists in the Bastet of the Huawei Vicky-AL00A/Victoria-AL00A/Warsaw-AL00 phones due to a lack of parameter checking. An attacker can trick the user into...

Multiple Buffer Overflow Vulnerabilities in Huawei Mobile's Bastet Component

Huawei Vicky-AL00A/Victoria-AL00A is a smartphone from Huawei. The Huawei smartphones suffer from multiple local buffer overflow vulnerabilities as it fails to perform proper boundary checks on user-supplied input. A local attacker can exploit these vulnerabilities to execute arbitrary code in th...

Multiple Buffer Overflow Vulnerabilities in Huawei Mobile's Bastet Component (CNVD-2017-04678)

Huawei Vicky-AL00A/Victoria-AL00A is a smartphone from Huawei. A buffer overflow vulnerability exists in the Bastet of the Huawei Vicky-AL00A/Victoria-AL00A phones due to a lack of parameter checking. An attacker who has gained root access to the Android system can trick the user into installing ...

Multiple Buffer Overflow Vulnerabilities in Huawei Mobile's Bastet Component (CNVD-2017-04679)

Huawei Vicky-AL00A/Victoria-AL00A is a smartphone from Huawei. A buffer overflow vulnerability exists in the Bastet of the Huawei Vicky-AL00A/Victoria-AL00A phones due to a lack of parameter checking. An attacker who has gained root access to the Android system can trick the user into installing ...

Security Advisory - Multiple Buffer Overflow Vulnerabilities in Bastet of Huawei Smart Phone

The Bastet of some Huawei mobile phones have three buffer overflow vulnerabilities due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the...