CVE-2017-2692

CVE-2017-2692 affects Huawei EMUI (Keyguard) on numerous devices/builds. The issue is a privilege-elevation vulnerability caused by insufficient validation in the Keyguard app, allowing an attacker to inject commands to gain elevated privileges. Exploitation is described as possible via user inte...

Security Advisory - Two Security Vulnerabilities in Huawei EMUI

Huawei EMUI3.1 has two vulnerabilities. The Keyguard application in Huawei EMUI3.1 has a privilege elevation vulnerability due to insufficient validation on specific parameters. An attacker may trick a user into installing a malicious application. Successful exploit could allow the attacker to...