Huawei Enjoy 6 MTK Platform Memory Out-of-Bounds Access Vulnerability

The Huawei Enjoy 6 is a smartphone from the Chinese company Huawei Huawei. The Huawei Enjoy 6 MTK platform suffers from a memory out-of-bounds access vulnerability, which can be exploited by an attacker to send specific parameters by tricking the user into installing a malicious application,...

Huawei Honor 8 Buffer Overflow Vulnerability

The Huawei Honor 8 is a smartphone from the Chinese company Huawei Huawei. The Huawei Honor 8 suffers from a buffer overflow vulnerability due to a lack of parameter checking in the phone's CameraISP driver. An attacker exploits the vulnerability by tricking users into installing a malicious...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2017-36243)

Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, of which MediaTek CCCI is a MediaTek CCCI component. A power lifting vulnerability exists in MediaTek CCCI in Android. The vulnerability can be exploited by an attacker to execute arbitra...

Huawei VIE-L09 Buffer Overflow Vulnerability

Huawei VIE-L09 is a smartphone from Huawei Huawei. The Huawei VIE-L09 suffers from a buffer overflow vulnerability that occurs when the device fails to adequately check parameters. An attacker exploits the vulnerability by tricking the user into installing a malicious application that sends...

Security Advisory - Two Buffer overflow Vulnerabilities on Huawei Smart Phone

Some Huawei smart phones have two buffer overflow vulnerabilities due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone, causing the smartphone restart or arbitrary...

Memory Misreference Vulnerability in Madapt Driver for Various Huawei Products

Huawei Vicky-AL00A and others are smartphone products of Huawei China.Madapt driver is a Madapt driver that runs on... A memory misreference vulnerability exists in the Madapt driver in several Huawei products. The vulnerability can be exploited to execute arbitrary code by tricking a user into...

Impersonating iOS Password Prompts

This is an interesting security vulnerability: because it is so easy to impersonate iOS password prompts, a malicious app can steal your password just by asking. Why does this work? iOS asks the user for their iTunes password for many reasons, the most common ones are recently installed iOS...

Down the Rabbit Hole with a BLU Phone Infection

When network administrator James Lockmuller bought 11 dirt-cheap Android phones via Amazon he thought he had a perfect solution for communicating with his warehouse team stretched across a 73,000 square-foot campus. He installed only Skype on the devices and planned to use the $50 BLU Studio X8 H...

bouncycastle: Information disclosure in GCMBlockCipher

It was found that an information disclosure flaw in Bouncy Castle could enable a local malicious application to gain access to user's private information...

Keychain vulnerability in macOS

On Monday, Patrick Wardle, a respected security researcher at Synack and owner of Objective-See, sent a tweet about a keychain vulnerability he had found in macOS High Sierra. As his tweet showed, it is possible for a malicious app to extract, and then exfiltrate, keychain data from High Sierra,...

bouncycastle: Information disclosure in GCMBlockCipher

It was found that an information disclosure flaw in Bouncy Castle could enable a local malicious application to gain access to user's private information...

Huawei Enjoy 6 MTK Platform Arbitrary Address Write Vulnerability

The Huawei Enjoy 6 is a smartphone from the Chinese company Huawei Huawei. An arbitrary address write vulnerability exists in the camera driver of Huawei Enjoy 6 phones using the MTK platform. The vulnerability is due to the device failing to adequately validate user input. An attacker exploits t...

Huawei Enjoy 6 MTK Platform Buffer Overflow Vulnerability (CNVD-2017-34441)

The Huawei Enjoy 6 is a smartphone from the Chinese company Huawei Huawei. A buffer overflow vulnerability exists in the camera driver of Huawei Enjoy 6 phones using the MTK platform. The vulnerability is due to the device failing to adequately validate user input. An attacker exploits the...

Huawei Enjoy 6 MTK Platform Buffer Overflow Vulnerability

The Huawei Enjoy 6 is a smartphone from the Chinese company Huawei Huawei. A buffer overflow vulnerability exists in the camera driver of Huawei Enjoy 6 phones using the MTK platform. The vulnerability is due to the device failing to adequately validate user input. An attacker exploits the...

Security Advisory - Integer overflow Vulnerability in Bastet Driver of Huawei Smart Phone

The Bastet driver of some Huawei smart phones has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitra...

Security Advisory - Buffer overflow Vulnerability in Bastet Driver of Huawei Smart Phone

The Bastet driver of some Huawei smart phones has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing...

Huawei Honor 5S Forensic Bypass Vulnerability

Huawei Honor 5S is a smartphone from Chinese company Huawei Huawei. The Huawei Honor 5S suffers from a forensic bypass vulnerability. An attacker obtains the phone and installs a malicious application on the phone, which allows the attacker to reset the phone's password or fingerprint without...

Huawei Mobile Phone Bootloader Memory Access Out-of-Bounds Vulnerability

Huawei P10 and P10 Plus are both smartphone products from Chinese company Huawei Huawei. A memory access out-of-bounds vulnerability exists in the Bootloader of Huawei P10 and P10 Plus due to lack of parameter checking. An attacker who has gained root access to Android could trick users into...

Huawei Y6 Pro AEE extension module information leak leaks

Huawei Y6 Pro is a smartphone from Chinese company Huawei Huawei. An information disclosure vulnerability exists in Huawei Y6 Pro phones using the AEE extension module of the MTK platform. Due to improper authorization of specific processes, an attacker may trick users into installing a malicious...

Buffer overflow vulnerability in multiple Huawei phones (CNVD-2017-19193)

Huawei honor 6x and honor 5C are both a smartphone from the Chinese company Huawei Huawei. A buffer overflow vulnerability exists in the driver in previous versions of the Huawei honor 6x Berlin-L21HNC432B360 and honor 5C NEM-AL10C00B356, which stems from the program's failure to adequately detec...