CVE-2017-8208

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8169

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone,...

CVE-2017-8212

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8150

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker wi...

CVE-2017-8175

The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a...

CVE-2017-8170

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone,...

CVE-2017-8211

The CVE-2017-8211 entry concerns a buffer overflow in the driver of Huawei Honor 5C and Honor 6X smartphones. Affected software versions are earlier than NEM-AL10C00B356 (for Honor 5C) and Berlin-L21HNC432B360 (for Honor 6X). The root cause is lack of parameter validation in the driver, enabling ...

CVE-2017-8149

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds memory access vulnerability due to the lack of parameter validation. An attack...

CVE-2017-8123

CVE-2017-8123 concerns the Huawei UMA product (software V200R001) and describes a privilege-elevation vulnerability caused by insufficient validation or improper processing of parameters. The NVD entry attributes an exploitable path via crafted packets that could yield elevated privileges, with C...

CVE-2017-8126

The UMA product with software V200R001 has a privilege elevation vulnerability due to insufficient validation or improper processing of parameters. An attacker could craft specific packets to exploit these vulnerabilities to gain elevated privileges...

CVE-2017-8170

CVE-2017-8170 targets Huawei smartphones with software earlier than VIE-L09C40B360. Root cause: buffer overflow due to lack of parameter validation in the vulnerable component. Exploitation scenario: a user is tricked into installing a malicious app that runs with root privileges and can send a c...

CVE-2017-8186

The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot...

CVE-2017-8186: Improper Input Validation

The Bastet of some Huawei mobile phones with software of earlier than MHA-AL00BC00B231 versions has a DOS vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot...

CVE-2017-8170: Improper Restriction of Operations within the Bounds of a Memory Buffer

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone,...

CVE-2017-8208: Improper Restriction of Operations within the Bounds of a Memory Buffer

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8211: Improper Restriction of Operations within the Bounds of a Memory Buffer

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

PT-2017-18128

Name of the Vulnerable Software and Affected Versions UMA product versions V200R001 through V300R001 Description The issue is due to insufficient validation or improper processing of parameters, allowing an attacker to craft specific packets and exploit the vulnerability to gain elevated...

PT-2017-18135

Name of the Vulnerable Software and Affected Versions UMA product version V200R001 Description The issue is related to insufficient validation or improper processing of parameters, which can lead to privilege elevation. An attacker could exploit this by crafting specific packets to gain elevated...

PT-2017-18191

Name of the Vulnerable Software and Affected Versions Huawei mobile phones with software earlier than MHA-AL00BC00B231 Description The issue is related to a lack of parameter validation, which can lead to a denial-of-service DOS condition. An attacker could potentially trick a user into installin...

PT-2017-18131

Name of the Vulnerable Software and Affected Versions UMA product version V200R001 Description The issue is related to insufficient validation or improper processing of parameters, which can lead to privilege elevation. An attacker could exploit this by crafting specific packets to gain elevated...