CVE-2017-15310

Huawei iReader app before 8.0.2.301 contains an arbitrary file deletion vulnerability caused by insufficient input validation, allowing an attacker to delete specific files on the SD card. Connected sources confirm this CVE (CVE-2017-15310) is part of a triple vulnerability set in Huawei’s iReade...

Security Advisory - Multiple Security Vulnerabilities in Huawei iReader

Huawei iReader app has three security vulnerabilities. The app has an input validation vulnerability due to insufficient validation on the URL used for loading network data. An attacker can control app access and load malicious websites created by the attacker, and the code in webpages would be...