Lucene search

K
cve[email protected]CVE-2015-8682
HistoryApr 13, 2016 - 2:59 p.m.

CVE-2015-8682

2016-04-1314:59:04
CWE-20
web.nvd.nist.gov
20
cve-2015-8682
video0 driver
huawei p8
mate s
smartphones
sensitive information
denial of service
system crash

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:N/A:C

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

The Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA-UL10 before GRA-UL10C00B350, GRA-TL00 before GRA-TL00C01B350, GRA-CL00 before GRA-CL00C92B350, and GRA-CL10 before GRA-CL10C92B350 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to obtain sensitive information from stack memory or cause a denial of service (system crash) via a crafted application, which triggers an invalid memory access.

Affected configurations

NVD
Node
huaweimate_sMatch-
AND
huaweimate_s_firmwareRangecrr-cl00c92b153
OR
huaweimate_s_firmwareRangecrr-tl00c01b153sp01
OR
huaweimate_s_firmwareRangecrr-ul00c00b153
Node
huaweip8Match-
AND
huaweip8_firmwareRangegra-cl00c92b230
OR
huaweip8_firmwareRangegra-cl10c92b230
OR
huaweip8_firmwareRangegra-tl00c01b230
OR
huaweip8_firmwareRangegra-ul00c00b230
OR
huaweip8_firmwareRangegra-ul10c00b230

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:N/A:C

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

Related for CVE-2015-8682