CVE-2015-8304
https://notcve.org/view.php?id=CVE-2015-8304
Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or camera permission. Desbordamiento de entero en teléfonos Huawei P7 con software en versiones anteriores a P7-L07 V100R001C01B606 permite a atacantes remotos obtener privilegios a través de una aplicación manipulada con permiso de system o camera. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-01-smartphone-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2015-8305
https://notcve.org/view.php?id=CVE-2015-8305
Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege. Smarphones Huawei Sophia-L10 con software anterior a P7-L10C900B852 permiten a atacantes provocar una denegación de servicio (pánico del sistema) a través de una aplicación manipulada con privilegios de system o camera. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-02-smartphone-en • CWE-20: Improper Input Validation •
CVE-2014-9135
https://notcve.org/view.php?id=CVE-2014-9135
The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via a crafted package. El módulo PackageInstaller en los teléfonos inteligentes Huawei P7-L10 anteriores a V100R001C00B136 permite a atacantes remotos suplantar el sitio web de origen y eludir el mecanismo de protección de lista blanca de sitios web a través de un paquete manipulado. • http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-397472.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/99283 • CWE-264: Permissions, Privileges, and Access Controls •