CVE-2017-17158

The CVE-2017-17158 entry concerns Huawei smartphones (Berlin-L21HNC185B381; Prague-AL00A/B/C/TL00 variants) with an information-exposure vulnerability. The issue arises when a user’s phone connects to a malicious charging device; via specially crafted messages, an unauthenticated attacker may tri...

CVE-2017-8202

The CVE-2017-8202 issue affects Huawei smartphones with CameraISP driver prior to Prague-[builds listed in the description]. It is a buffer overflow caused by missing parameter validation in the CameraISP driver. An attacker tricks a user into installing a malicious app that sends a crafted param...

CVE-2017-15325

The CVE-2017-15325 entry concerns Huawei Huawei smartphones with the Bdat driver, where lack of parameter validation causes an integer overflow. The vulnerability is triggered when a user is tricked into installing a malicious app, which can send crafted parameters to the Bdat driver and achieve ...