Input validation

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and writ...

Information disclosure

ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and earlier versions allows attackers to obtain sensitive information from uninitialized memory...

CVE-2016-8759

Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege...

CVE-2016-8760

Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a heap overflow vulnerability, which allows attackers to crash the system or escalate user privilege...

CVE-2016-8761

Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege...

CVE-2016-8774

The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, versions before NXT-CL00C92B386, versions before NXT-DL00C17B386, versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before...

CVE-2016-8776

Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection FRP to enter some functional modules without authorization and perform operations to update the Google account...

CVE-2016-8763

The CVE-2016-8763 issue affects Huawei TrustZone driver on Huawei P9 (pre EVA-AL10C00B352), P9 Lite (pre VNS-L21C185B130) and P8 Lite (pre ALE-L02C636B150). It is an improper resource release vulnerability that can cause a system restart or privilege elevation. Affected software versions are earl...

CVE-2016-8759

CVE-2016-8759 affects Huawei video driver in Huawei P9 (software EVA-AL10C00B192 and similar) and Huawei Honor 6 (H60-L02_6.10.1). The vulnerability is a stack overflow in the video driver that can crash the system or allow user privilege escalation. Huawei’s security advisory HWPSIRT-2016-08056/...

CVE-2016-8774

CVE-2016-8774 concerns a buffer overflow in the HIFI driver on Huawei smartphones (Mate 8, Mate S, P8, P9) prior to specific firmware revisions (e.g., Mate 8: NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386; Mate S: CRR-…C368 series; P8/P9 likewise). The root cause is inadequat...

CVE-2016-8757

The CVE-2016-8757 entry concerns the Huawei ION memory management module in Huawei smartphones (EVA-AL10C00B192, EVA-DL10C00B192, EVA-TL10C00B192, EVA-CL10C00B192 and earlier) where uninitialized memory could disclose sensitive information. The underlying issue is a memory allocation error that a...

CVE-2016-8764

The CVE-2016-8764 issue concerns Huawei devices where the TrustZone driver contains an input validation vulnerability that can allow an attacker to read and write user-mode memory data anywhere inside the TrustZone driver. Affected products include Huawei P9 (versions earlier than EVA-AL10C00B352...

CVE-2016-8776

Huawei CVE-2016-8776 affects P9 devices (EVA-AL10C00, EVA-CL10C00, EVA-DL10C00, EVA-TL10C00) and P9 Lite (VNS-L21C185) where Factory Reset Protection can be bypassed, allowing attackers to enter certain functional modules without authorization and perform Google account-related operations. The de...

CVE-2016-8760

CVE-2016-8760 is a heap overflow vulnerability in the touchscreen driver of Huawei P9 (before EVA-AL10C00B192) and Huawei Honor 6 (before H60-L02_6.10.1). The issue can crash the device or allow user privilege escalation. Affected devices use Huawei’s touchscreen/video drivers; Huawei’s security ...

CVE-2016-8761

CVE-2016-8761 is a stack overflow in Huawei video driver affecting Huawei P9 (firmware before EVA-AL10C00B192) and Huawei Honor 6 (before H60-L02_6.10.1). The flaw can crash the system or allow privilege escalation. Exploitation requires user interaction and local access; the embedded driver vuln...

CVE-2016-8761: Improper Restriction of Operations within the Bounds of a Memory Buffer

Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege...

CVE-2016-8760: Improper Restriction of Operations within the Bounds of a Memory Buffer

Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a heap overflow vulnerability, which allows attackers to crash the system or escalate user privilege...

CVE-2016-8759: Improper Restriction of Operations within the Bounds of a Memory Buffer

Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L026.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege...

CVE-2016-8757: Exposure of Sensitive Information to an Unauthorized Actor

ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and earlier versions allows attackers to obtain sensitive information from uninitialized memory...

CVE-2016-8764: Improper Input Validation

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and writ...