EUVD-2017-8306

Malware in sbrugna...

Design/Logic Flaw

Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an information leak vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious application on the smart phone and th...

CVE-2017-17140

CVE-2017-17140 affects Huawei Enjoy 5s and Y6 Pro smartphones on software versions prior to TAG-AL00C92B170 and TIT-L01C576B121. The vulnerability arises from lack of parameter validation, enabling a malicious application installed by a user to read sensitive information from kernel memory, causi...