CVE-2017-17320

Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188 have a memory double free vulnerability. The system does not manage the memory properly, that frees on the same memory address twice. An attacker tricks the user who has root privilege to install ...

Huawei Mate 7 - (/dev/hifi_misc) Privilege Escalation Exploit

Exploit for hardware platform in category local exploits / HuaWei Mate7 hifi driver Poc Writen by pray3r, / include include include include include include define HIFIMISCIOCTLWRITEPARAMS IOWR'A', 0x75, struct misciosyncparam struct misciosyncparam void parain; unsigned int parasizein; void...

CVE-2017-17326

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of...

CVE-2017-17326

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of...

CVE-2017-17324

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks...

CVE-2017-17225

The Near Field Communication NFC module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340aC00 has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobi...

CVE-2017-17225

The Near Field Communication NFC module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340aC00 has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobi...

CVE-2017-17227

GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120C212; The versions before ALP-L09 8.0.0.127C900; The versions before ALP-L09 8.0.0.128402/C02/C109/C346/C432/C652 has a out-of-bounds memory access vulnerability due to the input parameters validation. An attacker...

CVE-2017-17227

GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120C212; The versions before ALP-L09 8.0.0.127C900; The versions before ALP-L09 8.0.0.128402/C02/C109/C346/C432/C652 has a out-of-bounds memory access vulnerability due to the input parameters validation. An attacker...

CVE-2017-17279

The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343C00 has an authentication bypass vulnerability due to the improper design of the module. An attacker tricks a user into installing a malicious application, and the application can...

Authentication flaw

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of...

Integer overflow

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks...

Design/Logic Flaw

GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120C212; The versions before ALP-L09 8.0.0.127C900; The versions before ALP-L09 8.0.0.128402/C02/C109/C346/C432/C652 has a out-of-bounds memory access vulnerability due to the input parameters validation. An attacker...

Buffer overflow

The Near Field Communication NFC module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340aC00 has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobi...

Authentication flaw

The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343C00 has an authentication bypass vulnerability due to the improper design of the module. An attacker tricks a user into installing a malicious application, and the application can...

CVE-2017-17227

CVE-2017-17227 describes an out-of-bounds memory access vulnerability in the GPU driver of Huawei Mate 10 smartphones. Affected builds include ALP-L09 before 8.0.0.120 (C212), before 8.0.0.127 (C900), and before 8.0.0.128 (402/C02/C109/C346/C432/C652). The issue arises from input parameter valida...

CVE-2017-17324

Huawei Mate 9 Pro smartphones (models LON-AL00BC00B139D and LON-AL00BC00B229) are affected by an integer overflow in the camera driver caused by unvalidated external input. This overflow can lead to a buffer overflow and, as stated, could enable malicious code execution when a user installs a cra...

CVE-2017-17279

The CVE-2017-17279 issue affects Huawei Mate 9 Pro devices with software before LON-AL00B 8.0.0.343(C00), involving the soundtrigger module. The root cause is an improper design of the soundtrigger authentication mechanism, enabling an attacker to trick a user into installing a malicious app and ...

CVE-2017-17279

The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343C00 has an authentication bypass vulnerability due to the improper design of the module. An attacker tricks a user into installing a malicious application, and the application can...

CVE-2017-17326

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of...