Mate 9, Mate 9 Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:huawei_technologies_co.,_ltd.:mate_9,_mate_9_pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Huawei Technologies Co., Ltd. (33b7ced4-31fe-5cee-b3d6-4f50b86c1c00) |
|---|---|
| Product | Mate 9, Mate 9 Pro (138275e3-c7dc-54eb-803e-986165f6e1e9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-8142 |
vulnerable | 2026-06-08 05:10:07.278675 |
Details available
The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to create and free specific memory, which could triggers access memory after free it and causes a system crash or arbitrary code execution.
Published: 2017-11-22T19:00:00.000Z
Updated: 2024-09-16T19:04:22.668Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-17176 |
vulnerable | 2026-06-08 05:09:08.649810 |
Details available
The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156, versions earlier before LON-CL00BC00B156, versions earlier before LON-DL00BC00B156, versions earlier before LON-TL00BC00B156 has a arbitrary memory read/write vulnerability due to the input parameters validation. An attacker with the root privilege of the Android system could exploit this vulnerability to read and write memory data anywhere or execute arbitrary code in the TrustZone.
Published: 2018-10-17T15:00:00.000Z
Updated: 2024-08-05T20:44:00.186Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.