Guangdong Bai

**Name of the Vulnerable Software and Affected Versions** Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions Huawei mobile phones with software earlier than Victoria-AL00AC00B167 versions Huawei mobile phones with software earlier than Warsaw-AL00C00B191 versions **Description** The issue is related to insufficient input validation due to the lack of parameter validation. This can be exploited by an attacker who tricks a user into installing a malicious APP, which can then modify specific parameters to cause a system reboot. **Recommendations** For versions earlier than Vicky-AL00AC00B167, update to Vicky-AL00AC00B167 or later. For versions earlier than Victoria-AL00AC00B167, update to Victoria-AL00AC00B167 or later. For versions earlier than Warsaw-AL00C00B191, update to Warsaw-AL00C00B191 or later.

**Name of the Vulnerable Software and Affected Versions** Android versions 5.0.2, 5.1.1, 6.0, 6.0.1 **Description** A denial of service issue in the Setup Wizard component of the Android operating system is related to inadequate access control. This issue could allow a malicious application to cause a denial of service, potentially leading to a device becoming unusable and requiring a factory reset. The issue is estimated to be moderate in severity. **Recommendations** For Android version 5.0.2, update to a fixed version or apply a recommended configuration change to mitigate the issue. For Android version 5.1.1, update to a fixed version or apply a recommended configuration change to mitigate the issue. For Android version 6.0, update to a fixed version or apply a recommended configuration change to mitigate the issue. For Android version 6.0.1, update to a fixed version or apply a recommended configuration change to mitigate the issue. As a temporary workaround, consider restricting access to the Setup Wizard component until a patch is available.