Mingjian Zhou

Name of the Vulnerable Software and Affected Versions: HUAWEI Mate 10 smartphones versions prior to ALP-AL00 8.1.0.311 Description: The issue is related to a use after free vulnerability on the mediaserver component. An attacker could trick the user into installing a malicious application, which causes the software to reference memory after it has been freed. This could potentially lead to the execution of arbitrary code. Recommendations: For versions prior to ALP-AL00 8.1.0.311, update to version ALP-AL00 8.1.0.311 or later to resolve the issue. As a temporary workaround, consider restricting the installation of applications from untrusted sources to minimize the risk of exploitation.

The issue is related to an information disclosure vulnerability in the Android media framework, specifically in the `audioflinger` component. This vulnerability is associated with a lack of protection for sensitive data. Exploitation of this issue could allow a remote attacker to disclose protected information.

The issue is related to a component of the Android operating system, specifically the MediaTek libmtkomxvdec, which has a flaw in access control. This flaw can be exploited by a remote attacker to elevate their privileges.

A elevation of privilege vulnerability exists in the Android media framework, specifically in the mpeg4 encoder.

A information disclosure vulnerability exists in the Android media framework, specifically in libhevc. This issue may allow for the disclosure of sensitive information.

The issue is related to insufficient access control in the libmediaplayerservice library of the Android Media Framework. It allows a remote attacker to elevate their privileges.

The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with inadequate access control. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

The issue is related to an elevation of privilege vulnerability in the Android framework, which is associated with insufficient access control. This vulnerability can be exploited by a remote attacker to gain elevated privileges.

The issue is related to an elevation of privilege vulnerability in the Android framework, which is associated with insufficient access control. This vulnerability can be exploited by a remote attacker to gain elevated privileges.

The issue is related to a remote code execution vulnerability in the Android media framework. It is associated with insufficient access control, which can be exploited by a remote attacker to execute arbitrary code.

The issue is related to a remote code execution vulnerability in the Android media framework. It is associated with insufficient access control in the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

The issue is related to an elevation of privilege vulnerability in the Android framework, which is associated with insufficient access control. This vulnerability can be exploited by a remote attacker to gain elevated privileges.

The issue is related to an elevation of privilege vulnerability in the Android media framework, which can be exploited by a remote attacker to gain elevated privileges. This vulnerability is associated with inadequate access control in the Android operating system.

The issue is related to a remote code execution vulnerability in the Android media framework. It is also associated with insufficient access control in the Android operating system, which can allow a remote attacker to execute arbitrary code.

The issue is related to an elevation of privilege vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with insufficient access control, which can be exploited by a remote attacker to gain elevated privileges.

The issue is related to insufficient access control in the libeffects library of the Android Media Framework, which can be exploited by a remote attacker to elevate their privileges.

A information disclosure vulnerability in the Android media framework may allow a remote attacker to access protected data or execute arbitrary code in the context of a privileged process.

The issue is related to insufficient access control in the Audioserver application of the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code in the context of a privileged process. This problem is considered high because it can be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.

The issue is related to insufficient access control in the Audioserver application of the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code in the context of a privileged process using a local malicious application. This problem is considered high because it can be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.

An elevation of privilege issue in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.