Lucene search

[email protected]CVE-2015-8306

HistoryJan 12, 2016 - 7:59 p.m.

CVE-2015-8306

2016-01-1219:59:09

CWE-119

[email protected]

web.nvd.nist.gov

buffer overflow

hifi driver

huawei p8

denial of service

execute arbitrary code

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.6%

JSON

Buffer overflow in the HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 allows attackers to cause a denial of service (system crash) or execute arbitrary code via an unspecified parameter.

Affected configurations

NVD

Node

huaweip8_firmwareMatchgra-cl10

huaweip8_firmwareMatchgra-cl100

huaweip8_firmwareMatchgra-tl00

huaweip8_firmwareMatchgra-ul10

huaweip8_firmwareMatchgra-ul100

AND

huaweip8Match-

CPENameOperatorVersion
huawei:p8_firmwarehuawei p8 firmwareeqgra-cl10
huawei:p8_firmwarehuawei p8 firmwareeqgra-cl100
huawei:p8_firmwarehuawei p8 firmwareeqgra-tl00
huawei:p8_firmwarehuawei p8 firmwareeqgra-ul10
huawei:p8_firmwarehuawei p8 firmwareeqgra-ul100

CPE	Name	Operator	Version
huawei:p8_firmware	huawei p8 firmware	eq	gra-cl10
huawei:p8_firmware	huawei p8 firmware	eq	gra-cl100
huawei:p8_firmware	huawei p8 firmware	eq	gra-tl00
huawei:p8_firmware	huawei p8 firmware	eq	gra-ul10
huawei:p8_firmware	huawei p8 firmware	eq	gra-ul100

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-03-smartphone-en

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.6%

JSON

Related for CVE-2015-8306

prion1 nvd1 cvelist1 huawei1