Local Denial-of-Service for Huawei P7 mobile phones

Local Denial-of-Service for Huawei P7 mobile phones

Component exposure, improper Intent Filtering

For Huawei P7 telecommunications version 4G mobile phone, firmware version P7-L09V100R001C92B609, EMUI 3.0

Malicious apps without any permissions can continuously send malicious broadcasts locally, causing the system application com. android. phone to crash and resetting the mobile communication network connection.

The faulty component is com. huawei. cust. android. phone. LteEnableReceiver. The POC is as follows:

Intent I = new Intent (); while (true) {I. setAction ("com. android. huawei. LET_ENABLE_MODE_CHANGED"); sendBroadcast (I );}

Crash

Mobile Communication Network disconnected

In addition, the exported activity com. huawei. cust. android. phone. PLMNListPreference has a similar effect on startup,

Drozer POC

Dz> run app. activity. start -- component com. huawei. cust. android. phone com. huawei. cust. android. phone. PLMNListPreference

The problem is not serious, but it affects the key system application com. android. phone.

Solution:

Added Intent Exception Handling