CVE-2017-8141

The CVE-2017-8141 entry concerns a memory double-free vulnerability in the Touch Panel (TP) driver of Huawei P10 Plus smartphones with software versions prior to VKY-AL00C00B153. Exploitation requires root privileges and tricking a user into installing a malicious app; the app can spawn multiple ...

CVE-2017-2726

CVE-2017-2726 affects Huawei Bastet on P10 Plus and P10, prior to VKY-AL00C00B123/VTR-AL00C00B123 builds. Description and CNVD/Huawei advisories indicate a buffer overflow in Bastet caused by lack of parameter checking, exploitable when root Android is present and a user installs a malicious app....

CVE-2017-8149

CVE-2017-8149 affects Huawei P10 and P10 Plus boot loaders, where lack of parameter validation causes out-of-bounds memory access. An attacker with root privileges on Android could lure a user to install a malicious app, enabling the app to modify data and trigger a buffer overflow on the next re...

CVE-2017-8169

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone,...

CVE-2017-8204

The CVE-2017-8204 entry concerns the Bastet driver in Huawei Honor 9 smartphones (pre-STANFORD-AL10C00B175). The vulnerability is a buffer overflow caused by insufficient parameter validation in the Bastet driver, enabling arbitrary code execution when a user installs a malicious app with root pr...

CVE-2017-8170

Huawei smart phones with software earlier than VIE-L09C40B360 versions have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the smart phone,...

CVE-2017-8211

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8150

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker wi...

CVE-2017-8205

The CVE-2017-8205 issue affects the Bastet driver in Huawei Honor 9 smartphones (pre Stanford-AL10C00B175). The root cause is an integer overflow caused by missing parameter validation in the driver, allowing a malicious app with root privileges to send a crafted parameter to the driver and trigg...

Design/Logic Flaw

The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially crafted postinstall.sh file that will be executed with "root" privileges...

PT-2017-18218

Name of the Vulnerable Software and Affected Versions Huawei Honor 8 versions earlier than FRD-AL00C00B391 Huawei Honor V8 versions earlier than FRD-DL00C00B391 Huawei Honor 9 versions earlier than KNT-AL10C00B391 Huawei Honor 9 versions earlier than KNT-AL20C00B391 Huawei Honor 9 versions earlie...

CVE-2017-2723: Cleartext Storage of Sensitive Information

The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system could forge the Safe to read users' plaintext Safe passwords, leading to information leak...

CVE-2017-8209: Improper Restriction of Operations within the Bounds of a Memory Buffer

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has...

CVE-2017-8216: Incorrect Authorization

Warsaw Huawei Smart phones with software of versions earlier than Warsaw-AL00C00B180, versions earlier than Warsaw-TL10C01B180 have a permission control vulnerability. Due to improper authorization on specific processes, an attacker with the root privilege of a mobile Android system can exploit...

CVE-2017-2724: Improper Restriction of Operations within the Bounds of a Memory Buffer

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify...

PT-2017-18208

Name of the Vulnerable Software and Affected Versions Honor 9 Huawei smart phones versions earlier than Stanford-AL10C00B175 Description The issue is caused by a buffer overflow vulnerability in the Bastet driver due to the lack of parameter validation. An attacker can trick a user into installin...

PT-2017-18213

Name of the Vulnerable Software and Affected Versions Huawei smart phones versions earlier than NEM-AL10C00B356 Huawei smart phones versions earlier than Berlin-L21HNC432B360 Description The issue is caused by a buffer overflow due to the lack of parameter validation in the driver. An attacker ca...

PT-2017-18216

Name of the Vulnerable Software and Affected Versions Huawei smart phones versions earlier than NEM-AL10C00B356 Huawei smart phones versions earlier than Berlin-L21HNC432B360 Description The issue is caused by a buffer overflow due to the lack of parameter validation in the driver. An attacker ca...

CVE-2017-2696: Improper Restriction of Operations within the Bounds of a Memory Buffer

The emergdata driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter t...

PT-2017-18209

Name of the Vulnerable Software and Affected Versions Honor 9 Huawei smart phones versions earlier than Stanford-AL10C00B175 Description The issue is caused by an integer overflow vulnerability in the Bastet driver due to the lack of parameter validation. An attacker can trick a user into...