PT-2016-7475 · Huawei · P8+3

Panyu + 2 · Published 2016-09-26 · Updated 2016-12-02 · CVE-2016-8279

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B362 Huawei Mate S smartphones with software CRR-UL20 before CRR-UL20C00B362 Huawei Mate S smartphones with software CRR-CL00 before CRR-CL00C92B362 Huawei Mate S smartphones with software CRR-CL20 before CRR-CL20C92B362 P8 smartphones with software GRA-TL00 before GRA-TL00C01B366 P8 smartphones with software GRA-UL00 before GRA-UL00C00B366 P8 smartphones with software GRA-UL10 before GRA-UL10C00B366 P8 smartphones with software GRA-CL00 before GRA-CL00C92B366 Honor 6 and Honor 6 Plus smartphones with software before 6.9.16

Description The video driver in the affected smartphones allows attackers to cause a denial of service, resulting in a device reboot, via a crafted application.

Recommendations For Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B362, update to CRR-TL00C01B362 or later. For Huawei Mate S smartphones with software CRR-UL20 before CRR-UL20C00B362, update to CRR-UL20C00B362 or later. For Huawei Mate S smartphones with software CRR-CL00 before CRR-CL00C92B362, update to CRR-CL00C92B362 or later. For Huawei Mate S smartphones with software CRR-CL20 before CRR-CL20C92B362, update to CRR-CL20C92B362 or later. For P8 smartphones with software GRA-TL00 before GRA-TL00C01B366, update to GRA-TL00C01B366 or later. For P8 smartphones with software GRA-UL00 before GRA-UL00C00B366, update to GRA-UL00C00B366 or later. For P8 smartphones with software GRA-UL10 before GRA-UL10C00B366, update to GRA-UL10C00B366 or later. For P8 smartphones with software GRA-CL00 before GRA-CL00C92B366, update to GRA-CL00C92B366 or later. For Honor 6 and Honor 6 Plus smartphones with software before 6.9.16, update to 6.9.16 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2016-8279

Affected Products

Honor 6

Honor 6 Plus

Huawei Mate S

P8

References · 4

• https://osv.dev/vulnerability/CVE-2016-8279 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8279 · Security Note
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20160921-01-smartphone-en · Vendor Advisory
• http://securityfocus.com/bid/93096 · Note