Denial of Service Vulnerability in Huawei Smartphones
CVE-2015-8225

5.5MEDIUM

Key Information:

Vendor

Huawei
Status
Gem-703l Firmware
Ale Firmware
Vendor
CVE Published:
8 January 2016

What is CVE-2015-8225?

The Joint Photographic Experts Group Processing Unit (JPU) driver in certain Huawei smartphones allows remote attackers to trigger a denial of service condition. This occurs through a specially crafted application that requests system or camera permissions, which can lead to an unexpected crash. Users of affected Huawei ALE smartphones and GEM-703L models are advised to update to the latest software versions to mitigate this vulnerability.

References

http://www1.huawei.com/en/security/psirt/security-bulleti...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2015-8225 : Denial of Service Vulnerability in Huawei Smartphones