CVSS: 7.1EPSS: 0%CPEs: 10EXPL: 0CVE-2017-17313
https://notcve.org/view.php?id=CVE-2017-17313
19 Apr 2018 — The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the syst... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 14EXPL: 0CVE-2017-2697
https://notcve.org/view.php?id=CVE-2017-2697
22 Nov 2017 — The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and earlier versions,VNS-L21C185B142 and earlier versions,CAM-L21C10B130 and earlier versions,CAM-L21C185B141 and earlier versions has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the syste... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-02-smartphone-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 0CVE-2017-8143
https://notcve.org/view.php?id=CVE-2017-8143
22 Nov 2017 — Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of driver to crash the system. El controlador Wi-Fi de los smartphones Huawei Honor 5C y P9 Lite con versiones de software anteriores a la NEM-L21C432B351 y a la VNS-L21C10B381 tiene una vulnerabilidad de DoS. Un atacante... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 26EXPL: 0CVE-2017-8150
https://notcve.org/view.php?id=CVE-2017-8150
22 Nov 2017 — The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause arbitrary memory writing in the next system reboot, causing continuous system re... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-02-smartphone-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 0%CPEs: 6EXPL: 0CVE-2016-8762
https://notcve.org/view.php?id=CVE-2016-8762
02 Apr 2017 — The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to cause the system to restart. El controlador TrustZone en teléfonos Huawei P9 con versiones de software anteriores a EVA-AL10C00B352 y P9 Lite con software VNS-L21C185B130 y versiones anteriores y P8 Lite con software ALE-L02C636... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 6EXPL: 0CVE-2016-8763
https://notcve.org/view.php?id=CVE-2016-8763
02 Apr 2017 — The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to cause a system restart or privilege elevation. El controlador TrustZone en teléfonos Huawei P9 con versiones de software anteriores a EVA-AL10C00B352 y P9 Lite con software VNS-L21C185B130 y versiones anteriores y P8 Li... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en • CWE-664: Improper Control of a Resource Through its Lifetime •
CVSS: 6.4EPSS: 0%CPEs: 6EXPL: 0CVE-2016-8764
https://notcve.org/view.php?id=CVE-2016-8764
02 Apr 2017 — The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and write user-mode memory data anywhere in the TrustZone driver. El controlador TrustZone en teléfonos Huawei P9 con versiones de software anteriores a EVA-AL10C00B352 y P9 Lite con software VNS-L21C185B130 y versiones ant... • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en • CWE-20: Improper Input Validation •
CVSS: 4.6EPSS: 0%CPEs: 7EXPL: 1CVE-2016-8776
https://notcve.org/view.php?id=CVE-2016-8776
02 Apr 2017 — Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account. Teléfonos Huawei P9 con software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 y teléfonos P9 Lite con software VNS-L21C185 permiten a atacantes eludir la protección de restablecimiento de fábrica (FRP) para introduci... • https://github.com/akzedevops/CVE-2016-8776 • CWE-285: Improper Authorization •
