Improper Resource Release Vulnerability in Huawei P9 and P8 Lite Smartphones
CVE-2016-8763

7.8HIGH

Key Information:

Vendor

Huawei
Status
P9,p9 Lite,p8 Lite Versions Earlier Than Eva-al10c00b352,vns-l21c185b130 And Earlier Versions,ale-l02c636b150 And Earlier Versions
Vendor
CVE Published:
2 April 2017

What is CVE-2016-8763?

The TrustZone driver in specific Huawei smartphones, including the P9, P9 Lite, and P8 Lite, is susceptible to an improper resource release vulnerability. This flaw can be exploited by attackers to trigger a system restart or elevate privileges, compromising the device's security. Users of these affected models should apply the latest software updates to mitigate potential risks associated with this vulnerability.

Affected Version(s)

P9,P9 Lite,P8 Lite earlier than EVA-AL10C00B352,VNS-L21C185B130 and earlier ,ALE-L02C636B150 and earlier P9,P9 Lite,P8 Lite Versions earlier than EVA-AL10C00B352,VNS-L21C185B130 and earlier versions,ALE-L02C636B150 and earlier versions

References

http://www.securityfocus.com/bid/94509
vdb-entryx_refsource_BID
http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.