PT-2017-7464 · Huawei · Huawei P8+1
Chen Gengjia
+1
·
Published
2017-03-24
·
Updated
2017-03-27
·
CVE-2015-8678
CVSS v2.0
7.1
High
| Vector | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Huawei P8 smartphones versions GRA-TL00 before GRA-TL00C01B230
Huawei P8 smartphones versions GRA-CL00 before GRA-CL00C92B230
Huawei P8 smartphones versions GRA-CL10 before GRA-CL10C92B230
Huawei P8 smartphones versions GRA-UL00 before GRA-UL00C00B230
Huawei P8 smartphones versions GRA-UL10 before GRA-UL10C00B230
Huawei Mate S smartphones versions CRR-TL00 before CRR-TL00C01B160SP01
Huawei Mate S smartphones versions CRR-UL00 before CRR-UL00C00B160
Huawei Mate S smartphones versions CRR-CL00 before CRR-CL00C92B161
Description
The issue allows remote attackers to cause a denial of service (crash) via a crafted application, specifically targeting the ION driver in affected Huawei smartphones.
Recommendations
For Huawei P8 smartphones versions GRA-TL00 before GRA-TL00C01B230, update to version GRA-TL00C01B230 or later.
For Huawei P8 smartphones versions GRA-CL00 before GRA-CL00C92B230, update to version GRA-CL00C92B230 or later.
For Huawei P8 smartphones versions GRA-CL10 before GRA-CL10C92B230, update to version GRA-CL10C92B230 or later.
For Huawei P8 smartphones versions GRA-UL00 before GRA-UL00C00B230, update to version GRA-UL00C00B230 or later.
For Huawei P8 smartphones versions GRA-UL10 before GRA-UL10C00B230, update to version GRA-UL10C00B230 or later.
For Huawei Mate S smartphones versions CRR-TL00 before CRR-TL00C01B160SP01, update to version CRR-TL00C01B160SP01 or later.
For Huawei Mate S smartphones versions CRR-UL00 before CRR-UL00C00B160, update to version CRR-UL00C00B160 or later.
For Huawei Mate S smartphones versions CRR-CL00 before CRR-CL00C92B161, update to version CRR-CL00C92B161 or later.
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Huawei Mate S
Huawei P8