Huawei has announced that four of their flagship devices, being the Huawei P9, Huawei P9 Plus, Huawei Mate 8, and Huawei Mate 9, are set to get security bulletins in the near future that will address known security vulnerabilities reported to or found by Huawei recently. Huawei did not announce when these updates will come, only saying that they will come over the air to all users of the affected devices in an update sent either by Huawei directly or through mobile carriers. The vulnerabilities in question are all fairly serious, such as privilege escalation attacks or system crashing bugs.
Huawei P9 plus, a malicious application downloaded to the phone problem. This application can not download the power, which means that an attacker must trick the user into downloading it or gain physical access to the device to download it himself. This flaw problem is just crashing the phone; it hardly brings dangerous data to be destroyed, but can be annoying at the best, resulting in data loss or brick lining. Huawei Votes and Huawei mate 9 are easy to use as one cve-2017-2703. This requires physical access to the device and provides root access through the telephone inquiry function. Finally, cve – 2017 – 2698 affects Huawei Votes and Huawei Mating 8, and requires users with root access to download malicious applications. From there, an attacker could call or control by root privileges, making it a more dangerous use on the list.
Huawei has arranged to update all four mobile phones to cover all of the above listed uses. As mentioned earlier, Huawei has not made a timetable when these updates will be reached. Huawei’s security tracking list does not temporarily fix these vulnerabilities, so it is recommended that users carefully guard their devices until the patch is played; only allow and hardware on your phone, trustworthy people, do not download or install any application you are not fully sure There is a trustworthy origin, they claim to be what they are. Adhere to playing the store to download the application is usually sufficient to meet the latter’s recommendations.
