Buffer overflow

The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, versions before NXT-CL00C92B386, versions before NXT-DL00C17B386, versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before...

Stack overflow

Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege...

Information disclosure

ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and earlier versions allows attackers to obtain sensitive information from uninitialized memory...

Input validation

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and writ...

Authorization

Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection FRP to enter some functional modules without authorization and perform operations to update the Google account...

Privilege escalation

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to caus...

CVE-2016-8776

Huawei CVE-2016-8776 affects P9 devices (EVA-AL10C00, EVA-CL10C00, EVA-DL10C00, EVA-TL10C00) and P9 Lite (VNS-L21C185) where Factory Reset Protection can be bypassed, allowing attackers to enter certain functional modules without authorization and perform Google account-related operations. The de...

CVE-2016-8764

The CVE-2016-8764 issue concerns Huawei devices where the TrustZone driver contains an input validation vulnerability that can allow an attacker to read and write user-mode memory data anywhere inside the TrustZone driver. Affected products include Huawei P9 (versions earlier than EVA-AL10C00B352...

CVE-2016-8763

The CVE-2016-8763 issue affects Huawei TrustZone driver on Huawei P9 (pre EVA-AL10C00B352), P9 Lite (pre VNS-L21C185B130) and P8 Lite (pre ALE-L02C636B150). It is an improper resource release vulnerability that can cause a system restart or privilege elevation. Affected software versions are earl...

CVE-2016-8757

The CVE-2016-8757 entry concerns the Huawei ION memory management module in Huawei smartphones (EVA-AL10C00B192, EVA-DL10C00B192, EVA-TL10C00B192, EVA-CL10C00B192 and earlier) where uninitialized memory could disclose sensitive information. The underlying issue is a memory allocation error that a...

CVE-2016-8760

Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a heap overflow vulnerability, which allows attackers to crash the system or escalate user privilege...

CVE-2016-8774

CVE-2016-8774 concerns a buffer overflow in the HIFI driver on Huawei smartphones (Mate 8, Mate S, P8, P9) prior to specific firmware revisions (e.g., Mate 8: NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386; Mate S: CRR-…C368 series; P8/P9 likewise). The root cause is inadequat...

CVE-2016-8760

CVE-2016-8760 is a heap overflow vulnerability in the touchscreen driver of Huawei P9 (before EVA-AL10C00B192) and Huawei Honor 6 (before H60-L02_6.10.1). The issue can crash the device or allow user privilege escalation. Affected devices use Huawei’s touchscreen/video drivers; Huawei’s security ...

CVE-2016-8776

Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection FRP to enter some functional modules without authorization and perform operations to update the Google account...

CVE-2016-8761

CVE-2016-8761 is a stack overflow in Huawei video driver affecting Huawei P9 (firmware before EVA-AL10C00B192) and Huawei Honor 6 (before H60-L02_6.10.1). The flaw can crash the system or allow privilege escalation. Exploitation requires user interaction and local access; the embedded driver vuln...

CVE-2016-8774

The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, versions before NXT-CL00C92B386, versions before NXT-DL00C17B386, versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before...

CVE-2016-8759

CVE-2016-8759 affects Huawei video driver in Huawei P9 (software EVA-AL10C00B192 and similar) and Huawei Honor 6 (H60-L02_6.10.1). The vulnerability is a stack overflow in the video driver that can crash the system or allow user privilege escalation. Huawei’s security advisory HWPSIRT-2016-08056/...

CVE-2016-8759

Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege...

CVE-2016-8761

Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege...

Huawei Mate 8/P9 Phone Driver Buffer Overflow Vulnerability

Huawei Mate 8, P9 is a smartphone product of Huawei, China. A buffer overflow security vulnerability exists in the ddrdevfreq driver of the Huawei Mate 8 and P9 phones due to a lack of parameter checking. An attacker who has gained root privileges on Android can trick the user into installing a...