CVE-2017-15309

CVE-2017-15309 corresponds to a path traversal vulnerability in Huawei iReader (pre-8.0.2.301). The issue arises from insufficient validation of file storage paths, allowing an attacker to store downloaded malicious files in arbitrary directories. ZDI advisories confirm local exploitation vectors...

CVE-2017-15308

CVE-2017-15308 concerns the Huawei iReader app prior to 8.0.2.301, with an input-validation vulnerability on the URL used to load network data. The issue allows an attacker to control app access and load malicious websites, causing the code in loaded webpages to run. The CVE is confirmed in Huawe...

CVE-2017-15310

Huawei iReader app before 8.0.2.301 contains an arbitrary file deletion vulnerability caused by insufficient input validation, allowing an attacker to delete specific files on the SD card. Connected sources confirm this CVE (CVE-2017-15310) is part of a triple vulnerability set in Huawei’s iReade...