2 results (0.001 seconds)

CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 0

04 Jun 2019 — Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361(C636) versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root privilege to install an application on the smart phone, and the application can read some process information, which may cause sensitive information leak. Los teléfonos Mate 9 Pro Huawei anteriores a LON-L29C 8.0.0.361 (C636) tienen una vulnerabilidad de carencia de información debido a la filtración de validación de... • https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20190220-01-informationleak-en • CWE-20: Improper Input Validation •

CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0

14 Jun 2018 — Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356(C00) has an arbitrary memory free vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to driver to release special kernel memory resource. Successful exploit may result in phone crash or arbitrary code execution. Debido a la insuficiente verificación de parámetros, el controlador de la GPU de los sm... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180613-02-smartphone-en • CWE-20: Improper Input Validation •