CVE-2015-8088

CVE-2015-8088 is a heap-based buffer overflow in the Huawei Mate7/Mate 7 and P8 series HIFI driver (HIFI_MISC). The PoC details and linked documents describe exploitation via a crafted application triggering a heap overflow in the misc_io_sync_param handling, leading to denial of service (reboot)...

CVE-2016-8793

CVE-2016-8793 affects Huawei Mate 8, Mate S, and P8 devices with specific pre-update firmware versions. The root cause is missing parameter validation in input handling, which, when combined with Graphic or Camera permissions, can crash the system or escalate privileges. The affected software ver...

CVE-2015-8679

CVE-2015-8679 affects Huawei P8 and Mate S devices via the Maxim_smartpa_dev driver; a crafted application can trigger an invalid memory access, causing a DoS (system crash). Affected pre-patch versions include P8: GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before ...

CVE-2016-8794

CVE-2016-8794 affects Huawei Mate 8 (before specific builds), Mate S (before specific builds) and P8 (before specific builds). The root cause is input validation flaws in Huawei smartphones allowing an attacker with graphic or Camera privileges to crash the system or escalate privileges. Impact d...

CVE-2017-2693

CVE-2017-2693 is a path traversal vulnerability affecting Huawei EMUI prior to certain fixes, enabling an attacker to decompress malicious files to a target path during unzip operations. The CVE entry is corroborated across sources (NVD, CNVD, CVE listing) with Huawei EMUI versions impacted (as l...

CVE-2016-8774

CVE-2016-8774 concerns a buffer overflow in the HIFI driver on Huawei smartphones (Mate 8, Mate S, P8, P9) prior to specific firmware revisions (e.g., Mate 8: NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386; Mate S: CRR-…C368 series; P8/P9 likewise). The root cause is inadequat...

CVE-2017-2692

CVE-2017-2692 affects Huawei EMUI (Keyguard) on numerous devices/builds. The issue is a privilege-elevation vulnerability caused by insufficient validation in the Keyguard app, allowing an attacker to inject commands to gain elevated privileges. Exploitation is described as possible via user inte...

CVE-2017-2698

CVE-2017-2698 affects the ddr_devfreq driver in Huawei devices (Mate 8, P9) and in versions earlier than GRA-UL00C00B197. The vulnerability is a buffer overflow caused by insufficient parameter validation, exploitable by an attacker with root privileges who can coerce a user to install a maliciou...

CVE-2015-8318

CVE-2015-8318 is a heap-based buffer overflow in the HIFI driver affecting Huawei P8 models (GRA-TL00, GRA-CL00, GRA-CL10, GRA-UL00, GRA-UL10) with specific firmware updates (GRA-TL00C01B230, GRA-CL00C92B230, GRA-CL10C92B230, GRA-UL00C00B230, GRA-UL10C00B230) and Mate S models (CRR-TL00, CRR-UL00...

CVE-2015-8319

CVE-2015-8319 and CVE-2015-8318 describe heap-based buffer overflows in the HIFI driver on Huawei P8 and Mate S devices (software revisions listed in the descriptions). The vulnerabilities allow local attackers to cause a system crash or gain privileges via crafted applications. Affected products...

CVE-2015-8224

CVE-2015-8224 affects Huawei P8 devices before specific GRA build revisions, where an attacker using a fake base station can obtain UE signal strength measurements. The root cause is that the device does not verify its security status before sending signaling to a base station, enabling an inform...

CVE-2015-8337

The CVE-2015-8337 issue affects Huawei P8 and Mate7 devices, specifically the HIFI driver. The vulnerability allows remote attackers to trigger a denial of service (invalid memory access and reboot) via input null pointer as parameter, with affected software versions listed in the description. Co...

CVE-2015-8307

The CVE describes an interface access control vulnerability in Huawei graphics drivers affecting Huawei P8 models (GRA-TL00, GRA-CL00, GRA-CL10, GRA-UL00, GRA-UL10) before specific builds and Mate S models (CRR-TL00, CRR-UL00, CRR-CL00 before listed builds). The underlying issue allows a crafted ...

CVE-2015-8682

The CVE-2015-8682 vulnerability affects Huawei P8 and Mate S devices (Video0 driver) where an input validation flaw allows a crafted application to trigger invalid memory access, enabling local attackers to read stack memory content or cause a system crash (DoS). Affected software versions are pr...

CVE-2016-1496

CVE-2016-1496 concerns a DoS in Huawei P8 graphics driver. The issue affects Huawei P8 variants running GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230. The vulnerability arises...

CVE-2016-8279

CVE-2016-8279 affects Huawei video driver in Mate S (CRR-TL00/UL20/CL00/CL20 before specific Cxx2 builds), P8 (GRA-TL00/UL00/UL10/CL00 before specific Cxx2 builds), and Honor 6/6 Plus (before 6.9.16). A crafted application can cause a denial of service by rebooting the device. Affected software v...

CVE-2015-8306

Summary: CVE-2015-8306 is a buffer overflow in the Huawei P8 HIFI driver that can be triggered via an unspecified parameter, allowing a local attacker to crash the system or execute arbitrary code. Affected devices/versions: Huawei P8 family (GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-C...

CVE-2015-8678

The CVE-2015-8678 entry affects Huawei P8 and Mate S devices, where the ION driver vulnerabilities in multiple software branches (e.g., GRA-TL00, GRA-CL00, GRA-CL10, GRA-UL00/UL10; CRR-TL00/UL00/CL00) allow remote attackers to crash the system by tempting users to run a crafted app. Huawei’s advi...

CVE-2016-8791

CVE-2016-8791 affects Huawei Mate 8, Mate S and P8 devices with specific pre-patch firmware versions (Mate 8: NXT-AL10C00B386, NXT-CL00C92B386, NXT-DL00C17B386, NXT-TL00C01B386; Mate S: CRR-CL00C92B368, CRR-CL20C92B368, CRR-TL00C01B368, CRR-UL00C00B368, CRR-UL20C00B368; P8: GRA-TL00C01B366, GRA-C...

CVE-2015-8681

The CVE-2015-8681 entry describes an interface access control vulnerability in the ovisp driver affecting Huawei P8 (GRA-TL00/GRA-CL00/GRA-CL10/GRA-UL00/GRA-UL10 variants) and Mate S (CRR-TL00/CRR-UL00/CRR-CL00 families). A crafted app with camera permission can cause a denial of service (system ...

CVE-2016-8792

CVE-2016-8792 affects Huawei smartphones (Mate 8, Mate S, and P8). In affected builds, devices with graphic or Camera permissions are vulnerable due to input validation failures that allow crashing the system or elevating privileges. The Huawei security advisory HWPSIRT-2016-05147/05152/05153/052...

CVE-2015-8680

The CVE-2015-8680 entry describes an interface access control vulnerability in Huawei P8 and Mate S devices where the graphics driver can be manipulated by a crafted app with graphics permission to cause a denial of service (system crash) or gain privileges. Affected software includes Huawei mode...