CVE-2017-17279

The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343C00 has an authentication bypass vulnerability due to the improper design of the module. An attacker tricks a user into installing a malicious application, and the application can...

CVE-2017-17326

Summary (mode C): CVE-2017-17326 affects Huawei Mate 9 Pro smartphones (LON-AL00B139D/LON-AL00B229) and describes an activation lock bypass due to insufficient protection of the activation mechanism. The vulnerability could let an attacker bypass the activation lock and activate the device with a...

PT-2018-6502

Name of the Vulnerable Software and Affected Versions: Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 Description: The issue concerns an activation lock bypass. Normally, the smartphone should be activated by the former account after a reset if the 'find my...

PT-2018-6455

Name of the Vulnerable Software and Affected Versions: Huawei Mate 9 Pro versions before LON-AL00B 8.0.0.340aC00 Description: The issue is related to a buffer overflow in the Near Field Communication NFC module due to insufficient input validation. This could allow an attacker to inject malicious...

PT-2018-6457

Name of the Vulnerable Software and Affected Versions: Huawei Mate 10 smart phones versions before ALP-L09 8.0.0.120C212 Huawei Mate 10 smart phones versions before ALP-L09 8.0.0.127C900 Huawei Mate 10 smart phones versions before ALP-L09 8.0.0.128402/C02/C109/C346/C432/C652 Description: The issu...

PT-2018-6463

Name of the Vulnerable Software and Affected Versions: Huawei Mate 9 Pro smart phones with software versions prior to LON-AL00B 8.0.0.343C00 Description: The soundtrigger module has an authentication bypass issue due to improper design. An attacker can trick a user into installing a malicious...

PT-2018-6500

Name of the Vulnerable Software and Affected Versions: Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 Description: The issue is related to an integer overflow in the camera driver, which does not properly validate external input parameters. This leads to a buffer...

CVE-2017-17326: Undefined Security Weakness

Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after reset if find my phone function is on. The software does not have a sufficient protection of...

CVE-2017-17324: Integer Overflow or Wraparound

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks...

CVE-2017-17227: Out-of-bounds Read

GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120C212; The versions before ALP-L09 8.0.0.127C900; The versions before ALP-L09 8.0.0.128402/C02/C109/C346/C432/C652 has a out-of-bounds memory access vulnerability due to the input parameters validation. An attacker...

CVE-2017-17279: Undefined Security Weakness

The soundtrigger module in Huawei Mate 9 Pro smart phones with software of the versions before LON-AL00B 8.0.0.343C00 has an authentication bypass vulnerability due to the improper design of the module. An attacker tricks a user into installing a malicious application, and the application can...

CVE-2017-17225: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Near Field Communication NFC module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340aC00 has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobi...

Huawei Mate 9 Pro Forensic Bypass Vulnerability

Huawei Mate 9 Pro is a smartphone from Huawei Huawei. A forensic bypass vulnerability in the voice wake-up module in the Huawei Mate 9 Pro phone could allow an attacker to trick a user into installing a malicious application, bypass authentication, and take control of the phone to send a short...

Information leakage vulnerability in NFC module of multiple Huawei phones

Huawei Mate 9 Pro is a smartphone from Huawei Huawei. An information disclosure vulnerability exists in the NFC module of multiple Huawei phones, which can be exploited by an attacker to cause partial information disclosure by tricking the user into performing a specific action and tampering with...

CVE-2017-8165

Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak...

CVE-2017-8165

Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak...

CVE-2017-17139

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334C00; the versions before LON-AL00B 8.0.0.334C00 have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and...

Information disclosure

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334C00; the versions before LON-AL00B 8.0.0.334C00 have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and...

Information disclosure

Mate 9 Huawei smart phones with versions earlier than MHA-AL00BC00B233 have a sensitive information leak vulnerability. An attacker can trick a user to install a malicious application to exploit this vulnerability. Successful exploitation may cause sensitive information leak...

CVE-2017-17139

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334C00; the versions before LON-AL00B 8.0.0.334C00 have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and...