PT-2017-15518

Name of the Vulnerable Software and Affected Versions Huawei P9 Plus versions prior to VIE-AL10C00B386 Description The issue affects the vibrator service, allowing an attacker to crash the system by tricking a user into installing a malicious application and sending a specific parameter to the...

PT-2017-18187

Name of the Vulnerable Software and Affected Versions Huawei smart phones with software earlier than Nice-AL00C00B160 versions Huawei smart phones with software earlier than Nice-AL10C00B140 versions Description The issue is related to an out-of-bound read. An attacker can trick a user into...

PT-2017-15526

Name of the Vulnerable Software and Affected Versions Huawei Vmall APP versions prior to 1.5.3.0 Description The issue concerns the upgrade package of Huawei Vmall APP being transferred over HTTP, allowing a man-in-the-middle MITM to tamper with the package and potentially implant malicious...

CVE-2017-2731: Improper Input Validation

The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone vibrator service interface to crash the syste...

CVE-2017-8143: Improper Input Validation

Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of...

CVE-2017-2734: Uncontrolled Resource Consumption

P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service DoS vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a large numbe...

PT-2017-18155

Name of the Vulnerable Software and Affected Versions P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167 P10 and P10 Plus smartphones with software versions before VTR-TL00C01B167 P10 and P10 Plus smartphones with software versions before VKY-AL00C00B167 P10 and P10 Plus...

CVE-2017-2694: Undefined Security Weakness

The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An attacker can construct a malicious application to call it. Consequently, alert music will be played suddenly, compromising user experienc...

CVE-2017-2701: Insufficient Verification of Data Authenticity

Mate 9 with software MHA-AL00AC00B125 has a denial of service DoS vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting message from the application, it could be exploited to cause some functions of system unavailable...

CVE-2017-2739: Download of Code Without Integrity Check

The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP. A man in the middle MITM can tamper with the upgrade package of Huawei Vmall APP, and to implant the malicious applications...

CVE-2017-8146: Improper Input Validation

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the...

PT-2017-15521

Name of the Vulnerable Software and Affected Versions P9 Plus smartphones with software versions earlier than VIE-AL10BC00B386 Description The issue allows an attacker to trick a user into installing a malicious application on the smartphone. This application can send a given parameter to a...

CVE-2017-2732: Exposure of Sensitive Information to an Unauthorized Actor

Huawei Hilink APP Versions earlier before 5.0.25.306 has an information leak vulnerability. An attacker may trick a user into installing a malicious application and application can access Hilink APP data...

PT-2017-15519

Name of the Vulnerable Software and Affected Versions Huawei Hilink APP versions prior to 5.0.25.306 Description The issue is related to an information leak. An attacker can trick a user into installing a malicious application, which can then access Huawei Hilink APP data. Recommendations For...

CVE-2017-8160: Use After Free

The Madapt Driver of some Huawei smart phones with software Earlier than Vicky-AL00AC00B172 versions,Vicky-AL00CC768B122,Vicky-TL00AC01B167,Earlier than Victoria-AL00AC00B172 versions,Victoria-TL00AC00B123,Victoria-TL00AC01B167 has a use after free UAF vulnerability. An attacker can trick a user ...

CVE-2017-2735: Exposed Dangerous Method or Function

TIT-AL00 smartphones with software versions earlier before TIT-AL00C583B214 have a exposed system interface vulnerability. The software provides a system interface for interaction with external applications, but calling the interface is not properly restricted. An attacker could trick the user in...

Huawei Mate 9 Information Disclosure Vulnerability

Huawei Mate 9 is a smartphone from Huawei. Huawei Mate 9 has an information leakage vulnerability in the implementation of the CMA mechanism, which can be exploited by an attacker to leak sensitive information by inducing a user to install a malicious mobile application...

Security Advisory - Sensitive Information Leak Vulnerability in Some Huawei Smart Phones

There is a sensitive information leak vulnerability in the CMA implementation of some Huawei smart phones. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak. Vulnerability ID:...

Privilege escalation

An elevation of privilege vulnerability exists in the NVIDIA GPU driver gm20bclkthrotsetcdevstate, where an out of bound memory read is used as a function pointer could lead to code execution in the kernel.This issue is rated as high because it could allow a local malicious application to execute...

Huawei VIE-L09 Buffer Overflow Vulnerability (CNVD-2017-34412)

Huawei VIE-L09 is a smartphone from Huawei Huawei. The Huawei VIE-L09 suffers from a buffer overflow vulnerability that occurs when the device fails to adequately check parameters. An attacker exploits the vulnerability by tricking the user into installing a malicious application that sends...