Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-17183 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T20:44:00.430Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,TE30,TE40,TE50,TE60 Problem Types: integer overflow Description: Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an integer overflow vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could cause an integer overflow and might reset a process. Additional
packets to the target device. Successful exploit could cause an integer overflow and might reset a process. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en
CVE ID: CVE-2017-17184 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T20:44:00.243Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,TE30,TE40,TE50,TE60 Problem Types: integer overflow Description: Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an integer overflow vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could cause an integer overflow and might reset a process. Additional
CVE ID: CVE-2017-17185 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T20:43:59.769Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,TE30,TE40,TE50,TE60 Problem Types: out-of-bounds read Description: Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a out-of-bounds read vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could make the device access invalid memory and might reset a proce
CVE ID: CVE-2017-17186 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T20:43:59.884Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,TE30,TE40,TE50,TE60 Problem Types: DoS Description: Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have a DoS vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could make some data overwritten, leak device memory and potentially reset a process. Additional
ce. Successful exploit could make some data overwritten, leak device memory and potentially reset a process. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-soap-en
CVE ID: CVE-2017-17187 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T20:43:59.902Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,RP200,TE30,TE40,TE50,TE60 Problem Types: integer overflow Description: Huawei DP300 V500R002C00, RP200 V500R002C00, V600R006C00, TE30 V100R001C10, V500R002C00, V600R006C00, TE40 V500R002C00, V600R006C00, TE50 V500R002C00, V600R006C00, TE60 V100R001C10, V500R002C00, V600R006C00 have an integer overflow vulnerability. Due to insufficient input validation, an authenticated, remote attacker could send malformed SOAP packets to the target device. Successful exploit could cause an integer overflow and might reset a process. Additional
CVE ID: CVE-2017-17188 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17189 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17190 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17191 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17192 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17193 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17194 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17195 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17196 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17197 State: REJECTED Published: 2019-01-16T21:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17198 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17199 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:43:59.855Z Vendors: Huawei Technologies Co., Ltd. Products: DP300; RP200; TE30; TE40; TE50; TE60 Problem Types: out-of-bounds read Description: Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful expl
s a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful exploit could make the device read out of bounds and probably make a service unavailable. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-03-h323-en
CVE ID: CVE-2017-17200 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:43:59.891Z Vendors: Huawei Technologies Co., Ltd. Products: DP300; RP200; TE30; TE40; TE50; TE60 Problem Types: out-of-bounds read Description: Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability due to the improper processing of malformed H323 messages. A remote attacker that controls a server could exploit this vulnerability by sending malformed H323 reply messages to a target device. Successful expl
CVE ID: CVE-2017-17201 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T20:44:00.240Z Vendors: Huawei Technologies Co., Ltd. Products: BTV-EMUI5.0,Berlin-EMUI5.0,Berlin-L21,Berlin-L22,Berlin-L23,MHA-AL00A Problem Types: DoS Description: Some huawei smartphones with software BTV-DL09C233B350, Berlin-L21HNC432B360, Berlin-L22HNC636B360, Berlin-L24HNC567B360, Berlin-L21C10B130, Berlin-L21C185B132, Berlin-L21C464B130, Berlin-L22C346B140, Berlin-L22C636B160, Berlin-L23C605B131, Berlin-L23DOMC109B160, MHA-AL00AC00B125 have a DoS vulnerability. Due to insufficient input validation, an attacker could trick a user to execute a malicious application, which could be exploited by
ficient input validation, an attacker could trick a user to execute a malicious application, which could be exploited by attacker to launch DoS attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-dos-en
CVE ID: CVE-2017-17202 State: PUBLISHED Published: 2018-02-15T16:00:00 Last Updated: 2024-08-05T20:43:59.884Z Vendors: Huawei Technologies Co., Ltd. Products: AR120-S,AR1200,AR1200-S,AR150,AR150-S,AR160,AR200,AR200-S,AR2200,AR2200-S,AR3200,AR3600,AR510,NetEngine16EX,SRG1300,SRG2300,SRG3300 Problem Types: out-of-bounds read Description: Huawei AR120-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R
0R008C30, AR150 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR150-S V200R005C32, V200R007C00, V200R008C20, V200R008C30, AR160 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR200 V200R005C32, V200R006C10, V200R007C00, V200R007C01, V200R008C20, V200R008C30, AR200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR2200 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR2200-S V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C
AR3200 V200R005C32, V200R006C10, V200R006C11, V200R007C00, V200R007C01, V200R007C02, V200R008C00, V200R008C10, V200R008C20, V200R008C30, AR3600 V200R006C10, V200R007C00, V200R007C01, V200R008C20, AR510 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, NetEngine16EX V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30, SRG1300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG2300 V200R005C32, V200R006C10, V200R007C00, V200R007C02, V200R008C20, V200R008C30, SRG3300 V200R005C32, V200R006C10, V200R007C00, V200R008C20, V200R008C30 have an out-of-bounds read vulnerability due to insufficient input validation. An unauthenticated, remote atta
00R008C30 have an out-of-bounds read vulnerability due to insufficient input validation. An unauthenticated, remote attacker could exploit this vulnerability by sending malformed Session Initiation Protocol(SIP) packets to the target device. Successful exploit could make the device read out of bounds and thus cause a service to be unavailable. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180131-01-sip-en
CVE ID: CVE-2017-17203 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17204 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17205 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17206 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17207 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17208 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17209 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17210 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17211 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17212 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17213 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17214 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17215 State: PUBLISHED Published: 2018-03-20T15:00:00 Last Updated: 2024-08-05T20:43:59.888Z Vendors: Huawei Technologies Co., Ltd. Products: HG532 Problem Types: remote code execution Description: Huawei HG532 with some customized versions has a remote code execution vulnerability. An authenticated attacker could send malicious packets to port 37215 to launch attacks. Successful exploit could lead to the remote execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102344 - http://www.huawei.com/en/psirt/security-notices/huawei-sn-20171130-01-hg532-en
CVE ID: CVE-2017-17216 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:43:59.854Z Vendors: Huawei Technologies Co., Ltd. Products: DP300; RP200; TE30; TE40; TE50; TE60 Problem Types: out-of-bounds read Description: Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 have an out-of-bounds read vulnerability. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, success
s malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may cause process reboot. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-mgcp-en
CVE ID: CVE-2017-17217 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:44:00.034Z Vendors: Huawei Technologies Co., Ltd. Products: DP300; RP200; TE30; TE40; TE50; TE60 Problem Types: out-of-bounds write Description: Media Gateway Control Protocol (MGCP) in Huawei DP300 V500R002C00; RP200 V500R002C00SPC200; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an out-of-bounds write vulnerability. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, succes
ts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180124-01-mgcp-en
CVE ID: CVE-2017-17218 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:44:00.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an out-of-bounds read vulnerability. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service. Additional Analyst Notes: - CVE Program Conta
ckets, successful exploitation may impact availability of product service. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en
CVE ID: CVE-2017-17219 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:44:00.349Z Vendors: Huawei Technologies Co., Ltd. Products: DP300; RP200; TE30; TE40; TE50; TE60 Problem Types: invalid memory access Description: SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may imp
specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may impact availability of product service. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-sccpx-en
CVE ID: CVE-2017-17220 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:43:59.929Z Vendors: Huawei Technologies Co., Ltd. Products: DP300; RP200; TE30; TE40; TE50; TE60 Problem Types: invalid memory access Description: SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may imp
CVE ID: CVE-2017-17221 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:43:59.789Z Vendors: Huawei Technologies Co., Ltd. Products: eSpace 7950; eSpace 8950 Problem Types: remote code execution Description: Import Signal Tone function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after the Signal Tone is uploaded. Due to insufficient verification of the packets, this could be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/se
ecute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-espace-en
CVE ID: CVE-2017-17222 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:43:59.913Z Vendors: Huawei Technologies Co., Ltd. Products: eSpace 7950; eSpace 8950 Problem Types: remote code execution Description: Import Language Package function in Huawei eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 has a remote code execution vulnerability. An authenticated, remote attacker can craft and send the packets to the affected products after Language Package is uploaded. Due to insufficient verification of the packets, this could be exploited to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/ps
to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-01-espace-en
CVE ID: CVE-2017-17223 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:44:00.244Z Vendors: Huawei Technologies Co., Ltd. Products: eSpace 7910; eSpace 7950; eSpace 8950 Problem Types: directory traversal Description: Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remote attacker can craft specific URL to the affected products. Due to insufficient verification of the URL, successful exploit will upload and download files and cause information leak and system crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/
leak and system crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180131-02-espace-en
CVE ID: CVE-2017-17224 State: PUBLISHED Published: 2019-11-12T21:59:41 Last Updated: 2024-08-05T20:43:59.900Z Vendors: Huawei Products: HG655m Problem Types: command injection Description: Some Huawei smart phones with versions earlier than Harry-AL00C 9.1.0.206(C00E205R3P1) have a null pointer dereference vulnerability. An attacker crafts specific packets and sends to the affected product to exploit this vulnerability. Successful exploitation may cause the affected phone abnormal. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-notices/huawei-sn-20180327-01-hg655m-en - https://fortiguard.com/zeroday/FG-VD-18-017
CVE ID: CVE-2017-17225 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:43:59.976Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Pro Problem Types: buffer overflow Description: The Near Field Communication (NFC) module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340a(C00) has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobile phone. Successful exploit could lead to system restart or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/se
trary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180130-01-smartphone-en
CVE ID: CVE-2017-17226 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:43:59.922Z Vendors: Huawei Technologies Co., Ltd. Products: TripAdvisor Problem Types: arbitrary URL loading Description: The TripAdvisor app with the versions before TAMobileApp-24.6.4 pre-installed in some Huawei mobile phones have an arbitrary URL loading vulnerability due to insufficient input validation and improper configuration. An attacker may exploit this vulnerability to invoke TripAdvisor to load a specific URL and execute malicious code contained in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-
onal Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180130-01-tripadvisor-en
CVE ID: CVE-2017-17227 State: PUBLISHED Published: 2018-03-09T17:00:00 Last Updated: 2024-08-05T20:43:59.868Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 10 Problem Types: input parameters validation Description: GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120(C212); The versions before ALP-L09 8.0.0.127(C900); The versions before ALP-L09 8.0.0.128(402/C02/C109/C346/C432/C652) has a out-of-bounds memory access vulnerability due to the input parameters validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can call the driver with special parameter and cause accessing out-of-bounds me
on the smart phone, and the application can call the driver with special parameter and cause accessing out-of-bounds memory. Successful exploit may result in phone crash or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180207-01-smartphone-en
CVE ID: CVE-2017-17228 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-17229 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.