CVE-2017-8142

The Trusted Execution Environment TEE module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free UAF vulnerability. An attacker tricks a user into installing a malicious application, and...

CVE-2017-2707

CVE-2017-2707 pertains to Huawei Mate 9 devices with software MHA-AL00AC00B125, where a privilege-escalation flaw in the Push module can be triggered by a user-saving malicious rich-media in a message. The underlying issue enables an attacker to delete messages or impersonate the user to send mes...

CVE-2017-2707

Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message...

Huawei Mate 9 Information Disclosure Vulnerability

Huawei Mate 9 is a smartphone from Huawei. Huawei Mate 9 has an information leakage vulnerability in the implementation of the CMA mechanism, which can be exploited by an attacker to leak sensitive information by inducing a user to install a malicious mobile application...

CVE-2015-4422

The TEEOS module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service memory corruption via a crafted application...

CVE-2015-4421

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

Memory corruption

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

CVE-2015-4422

CVE-2015-4422 concerns Huawei Mate 7 devices (Mate7-TL10) in the TEEOS module. A local attacker with root permissions can escalate privileges or trigger memory corruption leading to denial of service via a crafted app. The affected product is described as the Mate 7 with TEEOS, before the patch v...

CVE-2015-4421

The CVE-2015-4421 issue affects Huawei Mate 7tzdriver and TEEOS. A flawed input check in the /dev/tc_ns_client kernel interface allows a user-space process to influence trusted execution environment calls, enabling local privilege escalation or memory corruption that can lead to a denial of servi...

CVE-2015-4422

The TEEOS module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service memory corruption via a crafted application...

CVE-2015-4421

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

Huawei Mate 9 DoS Vulnerability

Huawei Mate 9 is a smartphone from Chinese company Huawei Huawei. The Huawei Mate 9 is vulnerable to a DoS attack. An attacker can exploit the vulnerability to trick users into installing a malicious application, which can cause some system functions to become unavailable due to the system's...

Debian DSA-3916-1 : atril - security update

It was discovered that Atril, the MATE document viewer, made insecure use of tar when opening tar comic book archives CBT. Opening a malicious CBT archive could result in the execution of arbitrary code. This update disables the CBT format entirely. %NASLMINLEVEL 70300 C Tenable Network Security,...

[SECURITY] [DSA 3916-1] atril security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3916-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 21, 2017 https://www.debian.org/security/faq -...

Huawei Mate 9 Push Module Privilege Vulnerability

Huawei Mate 9 is a smartphone from Chinese company Huawei.Push module is one of the message push modules. A privilege extraction vulnerability exists in the Push module in Huawei Mate 9 version MHA-AL00AC00B125. An attacker can exploit the vulnerability by tricking a user into saving a malicious...

Huawei Mate 9 Push module directory traversal vulnerability

Huawei Mate 9 is a smartphone from Chinese company Huawei.Push module is one of the message push modules. A directory traversal vulnerability exists in the Push module in Huawei Mate 9 version MHA-AL00AC00B125 due to the program not checking the file name when compressing the file. An attacker...

Huawei Mobile TEE Module Use After Free Vulnerability

The Mate 9 and Mate 9 Pro are a smartphone from Huawei China. Trusted Execution Environment TEE is a secure area on the main processor of a mobile device The Huawei Mate 9 and Mate 9 Pro phones have an Use After Free UAF security vulnerability in the TEE module. An attacker induces a user to...

HooToo Trip Mate 6 vshttpd buffer overflow vulnerability (CNVD-2017-07295)

The HooToo Trip Mate 6 TM6 is a portable wireless router from HooToo USA. vshttpd aka ioos is one of the http servers. A stack buffer overflow vulnerability exists in vshttpd in HooToo TM6 firmware version 2.000.030 and earlier. A remote attacker can exploit this vulnerability to control the...

HooToo Trip Mate 6 vshttpd Buffer Overflow Vulnerability

The HooToo Trip Mate 6 TM6 is a portable wireless router from HooToo USA. vshttpd aka ioos is one of the http servers. A heap buffer overflow vulnerability exists in vshttpd in HooToo TM6 firmware version 2.000.030 and earlier. A remote attacker can exploit this vulnerability to control the progr...

Heap overflow

Heap buffer overflow in vshttpd aka ioos in HooToo Trip Mate 6 TM6 firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header...