CVE-2017-15347

Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and the application can riggers access memory after free it. A local attacker may exploit this...

CVE-2017-15347

CVE-2017-15347 affects Huawei Mate 9 Pro on software versions earlier than LON-AL00BC00B235. The issue is a use-after-free vulnerability that allows a malicious app, installed by a user, to access memory after it has been freed, potentially causing the device to crash. This is a local vulnerabili...

Huawei Mate 9 Pro NFC Module Buffer Overflow Vulnerability

Huawei Mate 9 Pro is a smartphone from Chinese company Huawei Huawei. The Huawei Mate 9 Pro NFC module suffers from a buffer overflow vulnerability, which is due to a lack of parameter checking in the program. An attacker can use a device such as an NFC reader to inject malicious data into the...

steel-mate.com.hk XSS vulnerability

Open Bug Bounty ID: OBB-544174 Description| Value ---|--- Affected Website:| steel-mate.com.hk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Huawei Mate 9 Pro Integer Overflow Vulnerability

Huawei Mate 9 Pro is a smartphone from the Chinese company Huawei Huawei. The Huawei Mate 9 Pro suffers from an integer overflow vulnerability, which results in an integer overflow due to the camera driver failing to properly validate an external input parameter and subsequent processing resultin...

Huawei Mate 10 Memory Out-of-Bounds Access Vulnerability

Huawei Mate 10 is a smartphone from Chinese company Huawei Huawei. The Huawei Mate 10 suffers from a memory out-of-bounds access vulnerability, which is due to a lack of parameter checking in the phone's GPU driver. An attacker can trick a user into installing a malicious application and calling...

Huawei Mate 9 Pro Activation Lock Bypass Vulnerability

Huawei Mate 9 Pro is a smartphone from Chinese company Huawei Huawei. The Huawei Mate 9 Pro suffers from an activation lock bypass vulnerability, whereby the phone, if the retrieval feature is enabled, must be activated using the original owner's account in order to be used after restoring the...

CVE-2017-15311

The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120SP2C00, before BLA-AL00 8.0.0.120SP2C00, before MHA-AL00B 8.0.0.334C00, and before LON-AL00B 8.0.0.334C00 have a stack overflow vulnerability due to the lack of parameter...

CVE-2017-15316

The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334C00 and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334C00 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application ca...

CVE-2017-15316

The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334C00 and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334C00 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application ca...

Double free

The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334C00 and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334C00 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application ca...

CVE-2017-15316

The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334C00 and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334C00 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application ca...

CVE-2017-15316

The CVE-2017-15316 issue is a memory double free vulnerability in Huawei’s Mate 9 Mate 9 Pro GPU driver (MHA-AL00B 8.0.0.334(C00) / LON-AL00B 8.0.0.334(C00)). The flaw exists in the Mali GPU driver and can be triggered when a user installs a malicious app calling a specific API, potentially crash...

CVE-2017-15311

The CVE-2017-15311 issue affects Huawei baseband modules in Mate 10/Mate 10 Pro and Mate 9 series (prior to ALP-AL00 8.0.0.120/SP2C00, BLA-AL00 8.0.0.120/SP2C00, MHA-AL00B 8.0.0.334(C00), LON-AL00B 8.0.0.334(C00)). Root cause: lack of parameter validation leading to a stack overflow in the baseba...

CVE-2017-15311

The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120SP2C00, before BLA-AL00 8.0.0.120SP2C00, before MHA-AL00B 8.0.0.334C00, and before LON-AL00B 8.0.0.334C00 have a stack overflow vulnerability due to the lack of parameter...

Huawei Mate cell phone information leakage vulnerability

The Huawei Mate 9 and Mate 9 Pro are both smartphones from the Chinese company Huawei. Huawei Mate 9 and Mate 9 Pro suffer from an information disclosure vulnerability. The vulnerability can be exploited by an attacker to obtain kernel data by tricking a user into installing a malicious...

Huawei Mobile GPU Driver Memory Double Release Vulnerability

Huawei Mate 9 and Mate 9 Pro are both smartphone products from the Chinese company Huawei.GPU driver is one of the graphics drivers used in... A double release vulnerability exists in the GPU driver in Huawei Mate 9 versions prior to MHA-AL00B 8.0.0.334C00 and Mate 9 Pro versions prior to LON-AL0...

Huawei Mate 9 Pro Memory Corruption Vulnerability

The Huawei Mate 9 Pro is a smartphone product from the Chinese company Huawei Huawei. The Huawei Mate 9 Pro suffers from a memory corruption vulnerability that can be successfully exploited by an attacker to crash the phone by tricking the user into installing a malicious mobile application that...

Huawei Mate 10 and Mate 10 Pro Stack Overflow Vulnerability

Huawei Mate 10 and Mate 10 Pro are both smartphone products from Chinese company Huawei. baseband modules are one of the baseband modules. A stack overflow vulnerability exists in the baseband module in Huawei Mate 10 ALP-AL00 prior to 8.0.0.120 SP2C00 and Mate 10 Pro BLA-AL00 prior to 8.0.0.120...

CVE-2017-8142

The Trusted Execution Environment TEE module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and...