CVE-2014-9135

CVE-2014-9135 affects Huawei P7-L10 smartphones (pre-V100R001C00B136) where the PackageInstaller module can be tricked by a crafted package to spoof the origin website and bypass the website whitelist protection. The issue, described in Huawei’s HW PSIRT advisory HW-397472, indicates a validity c...