CVE-2017-8182

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a out-of-bound read vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter and cause to...

CVE-2017-8183

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any...

CVE-2017-8184

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any...

CVE-2017-8179

The CVE-2017-8179 entry describes a buffer overflow in the MTK camera driver used by Huawei smartphones with software versions earlier than Nice-AL00C00B155. The vulnerability arises from insufficient input verification in the driver, enabling a user-tricked malicious app with privileges to send ...

CVE-2017-8181

CVE-2017-8181 affects Huawei smartphones with MTK-based camera driver prior to Nice-AL00C00B155. The vulnerability stems from insufficient input verification in the MTK camera driver, enabling an attacker to trick a user into installing a malicious app with elevated privileges and send a specific...

CVE-2017-8182

CVE-2017-8182 affects Huawei smartphones using the MTK platform with software older than Nice-AL00C00B160 (and Nice-AL10C00B140) versions. The issue is an out-of-bounds memory read in the MTK stack, exploitable when a user installs a malicious app, potentially allowing memory corruption through a...

CVE-2017-8183

CVE-2017-8183 is an MTK platform memory access vulnerability affecting Huawei smartphones with MTK-based software when on pre-Nice-AL00C00B160/Nice-AL10C00B140 builds. The issue allows a malicious app, once installed by the user, to trigger a memory access flaw and leak sensitive information. The...

CVE-2017-8184

Huawei MTK platform on certain Huawei smartphones (pre Nice-AL00C00B160 / Nice-AL10C00B140) is affected by CVE-2017-8184, a memory access vulnerability that can leak sensitive information when a user installs a malicious app and sends a crafted parameter. The Huawei PSIRT advisory confirms the is...

CVE-2017-8180

CVE-2017-8180 affects Huawei smartphones with MTK camera driver. The issue is a buffer overflow caused by insufficient input verification in the MTK camera driver; an attacker could trick a user into installing a malicious app with privileges and send crafted parameters to the driver to achieve p...

CVE-2017-8183: Exposure of Sensitive Information to an Unauthorized Actor

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any...

CVE-2017-8182: Out-of-bounds Read

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a out-of-bound read vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter and cause to...

CVE-2017-8181: Improper Restriction of Operations within the Bounds of a Memory Buffer

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a arbitrary memory write vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and...

CVE-2017-8180: Improper Restriction of Operations within the Bounds of a Memory Buffer

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends ...

CVE-2017-8179: Improper Restriction of Operations within the Bounds of a Memory Buffer

The camera driver of MTK platform in Huawei smart phones with software of versions earlier than Nice-AL00C00B155 has a buffer overflow vulnerability.Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege and sends ...

PT-2017-18184

Name of the Vulnerable Software and Affected Versions Huawei smart phones with software versions earlier than Nice-AL00C00B155 Description The issue is related to a buffer overflow vulnerability in the camera driver of the MTK platform. It occurs due to insufficient input verification, allowing a...

PT-2017-18185

Name of the Vulnerable Software and Affected Versions Huawei smart phones with software versions earlier than Nice-AL00C00B155 Description The issue is related to a buffer overflow vulnerability in the camera driver of the MTK platform. It occurs due to insufficient input verification, allowing a...

PT-2017-18186

Name of the Vulnerable Software and Affected Versions Huawei smart phones with software versions earlier than Nice-AL00C00B155 Description The issue is related to a camera driver on the MTK platform, which has an arbitrary memory write vulnerability due to insufficient input verification. This ca...

Security Advisory - Multiple Vulnerabilities in MTK Platform

There are multiple vulnerabilities in MTK platform used in Huawei smart phones. There is a out-of-bound read vulnerability in MTK platform used in Huawei smart phones. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter and cause to memor...

Security Advisory - Multiple Vulnerabilities in MTK Platform

There are two buffer overflow vulnerabilities and one arbitrary memory write vulnerability in the camera driver of MTK platform in some Huawei smart phones. Due to the insufficient input verification, an attacker tricks a user into installing a malicious application which has special privilege an...

Huawei Y6 Pro AEE extension module information leak leaks

Huawei Y6 Pro is a smartphone from Chinese company Huawei Huawei. An information disclosure vulnerability exists in Huawei Y6 Pro phones using the AEE extension module of the MTK platform. Due to improper authorization of specific processes, an attacker may trick users into installing a malicious...