PT-2017-9793 · Huawei · Huawei P8 Lite+2

Published 2017-04-02 · Updated 2017-04-07 · CVE-2016-8763

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Huawei P9 versions prior to EVA-AL10C00B352 Huawei P9 Lite versions prior to VNS-L21C185B130 Huawei P8 Lite versions prior to ALE-L02C636B150

Description The issue is related to an improper resource release in the TrustZone driver. This allows attackers to cause a system restart or potentially elevate privileges.

Recommendations For Huawei P9 versions prior to EVA-AL10C00B352, update to version EVA-AL10C00B352 or later. For Huawei P9 Lite versions prior to VNS-L21C185B130, update to version VNS-L21C185B130 or later. For Huawei P8 Lite versions prior to ALE-L02C636B150, update to version ALE-L02C636B150 or later.

Fix

Weakness Enumeration

CWE-664

Related Identifiers

CVE-2016-8763

Affected Products

Huawei P8 Lite

Huawei P9

Huawei P9 Lite

References · 4

• https://osv.dev/vulnerability/CVE-2016-8763 · Vendor Advisory
• http://huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8763 · Security Note
• http://securityfocus.com/bid/94509 · Note