6 results (0.003 seconds)

CVSS: 7.1EPSS: 0%CPEs: 10EXPL: 0

CVE-2017-17313

https://notcve.org/view.php?id=CVE-2017-17313

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot. El controlador inputhub de los teléfonos móviles HUAWEI P9 Lite en versiones anteriores a la VNS-L21C02B341, anteriores a la VNS-L21C22B380, anteriores a la VNS-L31C02B341, anteriores a la VNS-L31C440B390 y anteriores a la VNS-L31C636B396 tiene una vulnerabilidad de desbordamiento de búfer debido a la falta de validación de parámetros. Un atacante engaña a un usuario para que instale una aplicación maliciosa y esta envía datos concretos al controlador inputhub para explotar esta vulnerabilidad que, si se explota correctamente, podría provocar el reinicio del dispositivo. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 0

CVE-2017-8143

https://notcve.org/view.php?id=CVE-2017-8143

Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of driver to crash the system. El controlador Wi-Fi de los smartphones Huawei Honor 5C y P9 Lite con versiones de software anteriores a la NEM-L21C432B351 y a la VNS-L21C10B381 tiene una vulnerabilidad de DoS. Un atacante podría engañar a un usuario para que instale una aplicación maliciosa que pueda acceder a una dirección inválida del controlador para provocar el cierre inesperado del sistema. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170623-01-smartphone-en http://www.securityfocus.com/bid/99256 • CWE-20: Improper Input Validation •

CVSS: 9.3EPSS: 0%CPEs: 14EXPL: 0

CVE-2017-2697

https://notcve.org/view.php?id=CVE-2017-2697

The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and earlier versions,VNS-L21C185B142 and earlier versions,CAM-L21C10B130 and earlier versions,CAM-L21C185B141 and earlier versions has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege. El controlador goldeneye en NMO-L31C432B120 y versiones anteriores; NEM-L21C432B100 y anteriores; NEM-L51C432B120 y anteriores; KNT-AL10C746B160 y anteriores; VNS-L21C185B142 y anteriores; CAM-L21C10B130 y anteriores y CAM-L21C185B141 y versiones anteriores tiene una vulnerabilidad de desbordamiento de búfer. Un atacante con el privilegio root del sistema Android puede engañar a un usuario para que instale una aplicación maliciosa en el smartphone y enviar parámetros al smartphone para que el sistema se cierre inesperadamente o se escalen privilegios. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170208-02-smartphone-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 5.0EPSS: 0%CPEs: 6EXPL: 0

CVE-2016-8762

https://notcve.org/view.php?id=CVE-2016-8762

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to cause the system to restart. El controlador TrustZone en teléfonos Huawei P9 con versiones de software anteriores a EVA-AL10C00B352 y P9 Lite con software VNS-L21C185B130 y versiones anteriores y P8 Lite con software ALE-L02C636B150 y versiones anteriores tiene una vulnerabilidad de validación de entrada, lo que permite a atacantes provocar el reinicio del sistema. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en http://www.securityfocus.com/bid/94509 • CWE-20: Improper Input Validation •

CVSS: 6.4EPSS: 0%CPEs: 6EXPL: 0

CVE-2016-8764

https://notcve.org/view.php?id=CVE-2016-8764

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and write user-mode memory data anywhere in the TrustZone driver. El controlador TrustZone en teléfonos Huawei P9 con versiones de software anteriores a EVA-AL10C00B352 y P9 Lite con software VNS-L21C185B130 y versiones anteriores y P8 Lite con software ALE-L02C636B150 y versiones anteriores tiene una vulnerabilidad de validación de entrada, lo que permite a atacantes leer y escribir datos de memoria en modo usuario en cualquier lugar en el controlador TrustZone. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en http://www.securityfocus.com/bid/94509 • CWE-20: Improper Input Validation •