Wenlin Yang

Name of the Vulnerable Software and Affected Versions: Prague smart phones versions earlier than Prague-AL00AC00B211 Prague smart phones versions earlier than Prague-AL00BC00B211 Prague smart phones versions earlier than Prague-AL00CC00B211 Prague smart phones versions earlier than Prague-TL00AC01B211 Prague smart phones versions earlier than Prague-TL10AC01B211 Description: The Bdat driver has an integer overflow issue due to a lack of parameter validation. This can be exploited by an attacker who tricks a user into installing a malicious APP, which can then send a specific parameter to the driver, potentially leading to arbitrary code execution. Recommendations: For versions earlier than Prague-AL00AC00B211, update to Prague-AL00AC00B211 or later. For versions earlier than Prague-AL00BC00B211, update to Prague-AL00BC00B211 or later. For versions earlier than Prague-AL00CC00B211, update to Prague-AL00CC00B211 or later. For versions earlier than Prague-TL00AC01B211, update to Prague-TL00AC01B211 or later. For versions earlier than Prague-TL10AC01B211, update to Prague-TL10AC01B211 or later.

**Name of the Vulnerable Software and Affected Versions** Huawei H60 (Honor 6) versions earlier than H60-L02 6.12.16 Huawei P9 Plus versions earlier than VIE-AL10BC00B356 **Description** The issue is related to a stack overflow in the touchscreen drive. An attacker can exploit this by tricking a user into installing a malicious application on the smartphone and sending a specific parameter to the touchscreen drive, which can cause the system to crash or escalate privileges. **Recommendations** For Huawei H60 (Honor 6) versions earlier than H60-L02 6.12.16, update to version H60-L02 6.12.16 or later. For Huawei P9 Plus versions earlier than VIE-AL10BC00B356, update to version VIE-AL10BC00B356 or later.

**Name of the Vulnerable Software and Affected Versions** Huawei smart phones with software versions earlier than Nice-AL00C00B155 **Description** The issue is related to a buffer overflow vulnerability in the camera driver of the MTK platform. It occurs due to insufficient input verification, allowing an attacker to trick a user into installing a malicious application with special privileges. This application can send a specific parameter to the smartphone's driver, resulting in privilege escalation. **Recommendations** For versions earlier than Nice-AL00C00B155, update to a version that includes the fix for this issue to prevent privilege escalation.

**Name of the Vulnerable Software and Affected Versions** Huawei smart phones versions prior to VIE-L09C40B360 **Description** The issue is caused by a buffer overflow due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privilege, which can send a specific parameter to the smart phone, potentially causing the smartphone to restart or allowing arbitrary code execution. **Recommendations** For versions prior to VIE-L09C40B360, update to version VIE-L09C40B360 or later to resolve the issue. As a temporary workaround, consider restricting the installation of APPs to minimize the risk of exploitation. Avoid using parameters that may trigger the buffer overflow until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Huawei smart phones versions earlier than VIE-L09C40B360 **Description** The issue is caused by a buffer overflow due to the lack of parameter validation. An attacker can trick a user into installing a malicious APP with root privilege, which can send a specific parameter to the smart phone, potentially causing the smartphone to restart or allowing for arbitrary code execution. **Recommendations** For versions earlier than VIE-L09C40B360, update to version VIE-L09C40B360 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Huawei smart phones with software versions earlier than Nice-AL00C00B155 **Description** The issue is related to a camera driver on the MTK platform, which has an arbitrary memory write vulnerability due to insufficient input verification. This can be exploited by an attacker who tricks a user into installing a malicious application with special privileges, allowing the attacker to send a specific parameter to the driver and cause privilege escalation. **Recommendations** For versions earlier than Nice-AL00C00B155, update to a version Nice-AL00C00B155 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Huawei smart phones with software earlier than Nice-AL00C00B160 versions Huawei smart phones with software earlier than Nice-AL10C00B140 versions **Description** The issue is related to an out-of-bound read. An attacker can trick a user into installing a malicious application on the smart phone and send a given parameter to cause memory out-of-bound read. **Recommendations** For versions earlier than Nice-AL00C00B160, update to Nice-AL00C00B160 or later to resolve the issue. For versions earlier than Nice-AL10C00B140, update to Nice-AL10C00B140 or later to resolve the issue. As a temporary workaround, consider restricting the installation of applications from untrusted sources to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Huawei smart phones with software earlier than Nice-AL00C00B160 versions Huawei smart phones with software earlier than Nice-AL10C00B140 versions **Description** The issue allows an attacker to trick a user into installing a malicious application on the smart phone. By sending a given parameter, the attacker can cause any memory access vulnerabilities, leading to sensitive information leakage. **Recommendations** For versions earlier than Nice-AL00C00B160, update to Nice-AL00C00B160 or later to resolve the issue. For versions earlier than Nice-AL10C00B140, update to Nice-AL10C00B140 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Huawei smart phones with software earlier than Nice-AL00C00B160 versions Huawei smart phones with software earlier than Nice-AL10C00B140 versions **Description** The issue allows an attacker to trick a user into installing a malicious application on the smart phone. By sending a given parameter, the attacker can cause any memory access issues, leading to sensitive information leakage. **Recommendations** For versions earlier than Nice-AL00C00B160, update to Nice-AL00C00B160 or later to resolve the issue. For versions earlier than Nice-AL10C00B140, update to Nice-AL10C00B140 or later to resolve the issue. As a temporary workaround, consider restricting the installation of applications from untrusted sources to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Android versions Kernel-3.18 **Description** An elevation of privilege issue in the Synaptics Touchscreen driver could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue requires compromising a privileged process and is related to insufficient access control to certain functions. **Recommendations** For Android version Kernel-3.18, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Huawei P9 phones versions prior to EVA-AL10C00B192 Huawei Honor 6 phones versions prior to H60-L02 6.10.1 **Description** The touchscreen driver has a heap overflow issue, allowing attackers to crash the system or escalate user privileges. **Recommendations** For Huawei P9 phones versions prior to EVA-AL10C00B192, update to version EVA-AL10C00B192 or later to resolve the issue. For Huawei Honor 6 phones versions prior to H60-L02 6.10.1, update to version H60-L02 6.10.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** AOSP Mail versions 4.x through 4.4.3 AOSP Mail versions 5.0.x through 5.0.1 AOSP Mail versions 5.1.x through 5.1.0 AOSP Mail versions 6.x before 2016-10-01 AOSP Mail versions 7.0 before 2016-10-01 **Description** The issue allows attackers to read arbitrary attachments via a crafted application that provides a pathname value. This is due to the failure of the AttachmentProvider.java in AOSP Mail to ensure that certain values are integers. **Recommendations** For AOSP Mail versions 4.x through 4.4.3, update to version 4.4.4 or later. For AOSP Mail versions 5.0.x through 5.0.1, update to version 5.0.2 or later. For AOSP Mail versions 5.1.x through 5.1.0, update to version 5.1.1 or later. For AOSP Mail versions 6.x before 2016-10-01, update to a version released on or after 2016-10-01. For AOSP Mail versions 7.0 before 2016-10-01, update to a version released on or after 2016-10-01.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-06-01 **Description** The issue is related to errors in the code of the Qualcomm Wi-Fi driver in the Android operating system. It may allow a remote attacker to elevate their privileges using a specially crafted application. **Recommendations** For Android versions prior to 2016-06-01, update the operating system to a version released after 2016-06-01 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-06-01 **Description** The issue is related to errors in the code of the Qualcomm Wi-Fi driver in the Android operating system. It can be exploited by a remote attacker using a specially crafted application to gain elevated privileges. **Recommendations** For Android versions prior to 2016-06-01, update the operating system to a version released after 2016-06-01 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-06-01 on Nexus 7 (2013) devices **Description** The issue is related to errors in the code of the Qualcomm Wi-Fi driver in the Android operating system. It allows remote attackers to gain privileges via a crafted application. **Recommendations** For Android versions prior to 2016-06-01 on Nexus 7 (2013) devices, update the operating system to a version released after 2016-06-01 to resolve the issue.