Buffer overflow

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

Buffer overflow

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a...

Buffer overflow

The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

Input validation

The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a...

Buffer overflow

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone,...

Buffer overflow

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone,...

Out-of-bounds

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds memory access vulnerability due to the lack of parameter validation. An attack...

Buffer overflow

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

Code injection

The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot...

Buffer overflow

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8205

The CVE-2017-8205 issue affects the Bastet driver in Huawei Honor 9 smartphones (pre Stanford-AL10C00B175). The root cause is an integer overflow caused by missing parameter validation in the driver, allowing a malicious app with root privileges to send a crafted parameter to the driver and trigg...

CVE-2017-8207

The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8205

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a...

CVE-2017-8211

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8150

The CVE-2017-8150 entry affects Huawei P10 and P10 Plus bootloaders. The vulnerability is an arbitrary memory write caused by lack of parameter validation in boot loaders for versions prior to Victoria-L09AC605B162, Victoria-L29AC605B162, and Vicky-L29AC605B162. An attacker with root access on An...

CVE-2017-8204

The CVE-2017-8204 entry concerns the Bastet driver in Huawei Honor 9 smartphones (pre-STANFORD-AL10C00B175). The vulnerability is a buffer overflow caused by insufficient parameter validation in the Bastet driver, enabling arbitrary code execution when a user installs a malicious app with root pr...

CVE-2017-8186

CVE-2017-8186 affects the Bastet component on Huawei mobile devices with software older than MHA-AL00BC00B231. Root cause: lack of parameter validation in Bastet. Exploitation: an attacker can coerce a user into installing a malicious app that modifies specific parameters to trigger a system rebo...

CVE-2017-8202

The CVE-2017-8202 issue affects Huawei smartphones with CameraISP driver prior to Prague-[builds listed in the description]. It is a buffer overflow caused by missing parameter validation in the CameraISP driver. An attacker tricks a user into installing a malicious app that sends a crafted param...

CVE-2017-8210

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8204

The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a...