Page 2 of 8 results (0.004 seconds)

CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0

Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or camera permission. Desbordamiento de entero en teléfonos Huawei P7 con software en versiones anteriores a P7-L07 V100R001C01B606 permite a atacantes remotos obtener privilegios a través de una aplicación manipulada con permiso de system o camera. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-01-smartphone-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0

Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege. Smarphones Huawei Sophia-L10 con software anterior a P7-L10C900B852 permiten a atacantes provocar una denegación de servicio (pánico del sistema) a través de una aplicación manipulada con privilegios de system o camera. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-02-smartphone-en • CWE-20: Improper Input Validation •

CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0

The PackageInstaller module in Huawei P7-L10 smartphones before V100R001C00B136 allows remote attackers to spoof the origin website and bypass the website whitelist protection mechanism via a crafted package. El módulo PackageInstaller en los teléfonos inteligentes Huawei P7-L10 anteriores a V100R001C00B136 permite a atacantes remotos suplantar el sitio web de origen y eludir el mecanismo de protección de lista blanca de sitios web a través de un paquete manipulado. • http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-397472.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/99283 • CWE-264: Permissions, Privileges, and Access Controls •