CVE-2019-5264

CVE-2019-5264 describes an information-disclosure vulnerability in several Huawei smartphones (Mate 10/Pro, Honor V10, Changxiang series, Y9 2018, Mate 9, etc.). The issue stems from improper handling of certain data related to apps protected by applock in a rare condition, enabling potential dis...

CVE-2017-15311

The CVE-2017-15311 issue affects Huawei baseband modules in Mate 10/Mate 10 Pro and Mate 9 series (prior to ALP-AL00 8.0.0.120/SP2C00, BLA-AL00 8.0.0.120/SP2C00, MHA-AL00B 8.0.0.334(C00), LON-AL00B 8.0.0.334(C00)). Root cause: lack of parameter validation leading to a stack overflow in the baseba...

CVE-2017-2701

The CVE-2017-2701 entry describes a DoS vulnerability on Huawei Mate 9 smartphones (MHA-AL00AC00B125). The root cause is the system not verifying broadcasting messages from an installed application, allowing a user tricked into installing a malicious app to cause certain system functions to becom...

CVE-2017-15316

The CVE-2017-15316 issue is a memory double free vulnerability in Huawei’s Mate 9 Mate 9 Pro GPU driver (MHA-AL00B 8.0.0.334(C00) / LON-AL00B 8.0.0.334(C00)). The flaw exists in the Mali GPU driver and can be triggered when a user installs a malicious app calling a specific API, potentially crash...

CVE-2017-2702

The CVE-2017-2702 entry is supported by multiple connected documents confirming a vulnerability in Huawei smartphones (notably Mate 9) where the Phone Finder feature can be bypassed in versions earlier than MHA-AL00C00B170. An attacker can bypass Phone Finder and obtain the phone owner privileges...

CVE-2017-2716

Huawei Mate 9 camerafs driver (versions earlier than MHA-AL00BC00B173) contains a buffer overflow due to lack of input validation. An attacker can trick a user into installing a malicious app with Android system privileges and send a specific parameter to the driver, causing a system crash or pri...

CVE-2017-17176

CVE-2017-17176 affects Huawei Mate 9 and Mate 9 Pro hardware security module prior to builds MHA-AL00BC00B156, MHA-CL00BC00B156, MHA-DL00BC00B156, MHA-TL00BC00B156, LON-AL00BC00B156, LON-CL00BC00B156, LON-DL00BC00B156, LON-TL00BC00B156. Root-level Android access could trigger arbitrary memory rea...

CVE-2017-8144

CVE-2017-8144 affects several Huawei smartphones (e.g., Honor 5A, Honor 8 Lite, Mate 9/9 Pro, P10/Plus, and others listed in NVD) with software versions prior to specific CAM/ Prague/ MHA/LON/VTR/VKY builds. The root cause is a resource exhaustion vulnerability caused by a misconfigured setting t...

CVE-2017-8142

CVE-2017-8142 affects Huawei Mate 9 and Mate 9 Pro devices, where the TEE module driver is vulnerable to a Use-After-Free (UAF). The issue occurs on software versions earlier than MHA-AL00BC00B221 and LON-AL00BC00B221. An attacker can entice a user to install a malicious app that spawns multiple ...

CVE-2017-17139

CVE-2017-17139 affects Huawei Mate 9 and Mate 9 Pro devices running before MHA-AL00B/LON-AL00B 8.0.0.334(C00). The issue is an information-leak in the date service proxy implementation that can allow a user-tricked malicious app to access kernel date information, causing sensitive data exposure. ...

CVE-2017-2703

Huawei Phone Finder bypass CVE-2017-2703 affects multiple Huawei smartphone models (e.g., MHA-AL00, MHA-CL00, MHA-DL00, MHA-TL00, EVA-AL10/CL10/DL10/TL10, EVA-DL10, etc.). The root cause is a bypass of the Phone Finder security feature, allowing an attacker to access System Settings via specific ...

CVE-2018-7930

CVE-2018-7930 affects Huawei Mate 9 smartphones with the NFC module prior to MHA-L29B 8.0.0.366 (C567). The vulnerability arises from insufficient validation of data transfer requests in the NFC component, allowing an attacker to obtain arbitrary files from the user’s device when the user’s phone...

CVE-2017-2707

CVE-2017-2707 pertains to Huawei Mate 9 devices with software MHA-AL00AC00B125, where a privilege-escalation flaw in the Push module can be triggered by a user-saving malicious rich-media in a message. The underlying issue enables an attacker to delete messages or impersonate the user to send mes...

CVE-2017-2706

CVE-2017-2706 affects Huawei Mate 9 (software MHA-AL00AC00B125) via a directory traversal vulnerability in the Push module. The root cause is that the decompression process does not verify the file name, allowing traversal to system directories and enabling an attacker to replace files and impact...

CVE-2018-7992

CVE-2018-7992 affects Huawei Mdapt (madapt) driver used by Huawei MediaPad M3, Mate 9 Pro (pre-8.0.0.356(C00)) and P10 Plus (pre-8.0.0.357(C00)). The vulnerability is a buffer overflow caused by insufficient input validation in the driver, which could allow an attacker to trick a user into instal...

CVE-2017-8165

The CVE-2017-8165 entry concerns Huawei Mate 9 smartphones with CMA information-disclosure vulnerability in the CMA implementation. Affected devices are Mate 9 versions earlier than MHA-AL00BC00B233. An attacker can lure a user into installing a malicious app, which may trigger a sensitive inform...

CVE-2018-7940

The CVE-2018-7940 entry applies to Huawei Mate 10 and Mate 10 Pro devices with firmware earlier than 8.0.0.129 (SP2C00) or SP2C01, where an authentication bypass vulnerability exists. An attacker with high privileges can bypass activation through specific operations, effectively gaining control a...