PT-2016-3949 · Huawei · Huawei P8+1

Chengming Yang · Published 2016-04-07 · Updated 2016-04-11 · CVE-2015-8680

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei P8 smartphones versions GRA-TL00 before GRA-TL00C01B230 Huawei P8 smartphones versions GRA-CL00 before GRA-CL00C92B230 Huawei P8 smartphones versions GRA-CL10 before GRA-CL10C92B230 Huawei P8 smartphones versions GRA-UL00 before GRA-UL00C00B230 Huawei P8 smartphones versions GRA-UL10 before GRA-UL10C00B230 Huawei Mate S smartphones versions CRR-TL00 before CRR-TL00C01B160SP01 Huawei Mate S smartphones versions CRR-UL00 before CRR-UL00C00B160 Huawei Mate S smartphones versions CRR-CL00 before CRR-CL00C92B161

Description The issue allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application with the graphics permission. This is related to an "interface access control" issue.

Recommendations For Huawei P8 smartphones versions GRA-TL00 before GRA-TL00C01B230, update to a version after GRA-TL00C01B230. For Huawei P8 smartphones versions GRA-CL00 before GRA-CL00C92B230, update to a version after GRA-CL00C92B230. For Huawei P8 smartphones versions GRA-CL10 before GRA-CL10C92B230, update to a version after GRA-CL10C92B230. For Huawei P8 smartphones versions GRA-UL00 before GRA-UL00C00B230, update to a version after GRA-UL00C00B230. For Huawei P8 smartphones versions GRA-UL10 before GRA-UL10C00B230, update to a version after GRA-UL10C00B230. For Huawei Mate S smartphones versions CRR-TL00 before CRR-TL00C01B160SP01, update to a version after CRR-TL00C01B160SP01. For Huawei Mate S smartphones versions CRR-UL00 before CRR-UL00C00B160, update to a version after CRR-UL00C00B160. For Huawei Mate S smartphones versions CRR-CL00 before CRR-CL00C92B161, update to a version after CRR-CL00C92B161.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2015-8680

Affected Products

Huawei Mate S

Huawei P8

References · 2

• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-8680 · Security Note