Authentication flaw

Huawei Honor 5S smart phones with software the versions before TAG-TL00C01B173 have an authentication bypass vulnerability due to the improper design of some components. An attacker can get a user's smart phone and install malicious apps in the mobile phone, allowing the attacker to reset the...

Buffer overflow

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a...

Design/Logic Flaw

HONOR 7 Lite mobile phones with software of versions earlier than NEM-L21C432B352 have an App Lock bypass vulnerability. An attacker could perform specific operations to bypass the App Lock to use apps on a target mobile phone temporarily...

Buffer overflow

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

Buffer overflow

The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-UL00C00B193 have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installin...

CVE-2017-8207

The CVE-2017-8207 entry describes a buffer overflow in the driver of Huawei Honor 5C/6x smartphones (pre-NEM-AL10C00B356 and pre-Berlin-L21HNC432B360). The underlying issue is lack of parameter validation in the driver, allowing a user-specified parameter sent from a malicious app with Android ro...

CVE-2017-8214

CVE-2017-8214 affects Huawei/Honor smartphones (multiple models listed) with firmware versions older than a set of FRD/KNT/Stanford/Duke Picasso Barca EVA variants. The root cause is an unlock-code-verification bypass that lets an attacker with root privileges bypass unlock checks and unlock the ...

CVE-2017-2729

The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-UL00C00B193 have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installin...

CVE-2017-2733

Honor 6X smartphones with software versions earlier than BLN-AL10C00B357 and versions earlier than BLN-AL20C00B357 have an information leak vulnerability due to improper file permission configuration. An attacker tricks a user into installing a malicious application on the smart phone, and the...

CVE-2017-2733

Vulnerability: CVE-2017-2733 affects Huawei Honor 6X devices running older firmware versions (BLN-AL10C00B357 and BLN-AL20C00B357). Root cause: improper file permissions enabling information disclosure. Impact: an attacker can trick the user into installing a malicious app that reads the cipher t...

CVE-2017-2717

honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overflow vulnerability. The attacker sends a response message to the device, which contains an illegal length field, it could produce an intege...

CVE-2017-8208

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8206

CVE-2017-8206 concerns Huawei/Honor 7 Lite devices. The vulnerability is described as an App Lock bypass in the Phone Manager’s App Lock feature for software versions earlier than NEM-L21C432B352, enabling an attacker to temporarily access apps on a target device. Affected product: HONOR 7 Lite (...

CVE-2017-8211

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8211

The CVE-2017-8211 entry concerns a buffer overflow in the driver of Huawei Honor 5C and Honor 6X smartphones. Affected software versions are earlier than NEM-AL10C00B356 (for Honor 5C) and Berlin-L21HNC432B360 (for Honor 6X). The root cause is lack of parameter validation in the driver, enabling ...

CVE-2017-8205

The CVE-2017-8205 issue affects the Bastet driver in Huawei Honor 9 smartphones (pre Stanford-AL10C00B175). The root cause is an integer overflow caused by missing parameter validation in the driver, allowing a malicious app with root privileges to send a crafted parameter to the driver and trigg...

CVE-2017-8212

CVE-2017-8212 affects Huawei Honor 5C and Honor 6x smartphones running affected software versions prior to NEM-AL10C00B356 and Berlin-L21HNC432B360, respectively. The vulnerability is a buffer overflow in the device driver caused by insufficient parameter validation. An attacker who tricks a user...

CVE-2017-2729

The CVE-2017-2729 entry concerns a buffer overflow in Huawei Honor 5A bootloaders (versions older than CAM-TL00C01B193, CAM-TL00HC00B193, CAM-UL00C00B193). Root-privilege Android attackers can trick users into installing a malicious app, which may modify data to trigger a buffer overflow on the n...

CVE-2017-2717

CVE-2017-2717 affects Huawei Honor 8 Pro devices (Duke-L09C10B120 and earlier; Duke-L09C432B120 and earlier; Duke-L09C636B120 and earlier). Root cause: integer overflow caused by processing a response message with an illegal length field, potentially triggering a restart of the modem system. Impa...

CVE-2017-8143

Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of...