Security Advisory - DoS Vulnerabilities in Driver of Huawei Smart Phones

There is a Denial of Service (DoS) vulnerability in ION driver and Maxim_smartpa_dev driver in some Huawei smart phones respectively. An attacker may trick a user into installing a malicious application and the application can access invalid address of driver to crash the system. (Vulnerability ID: HWPSIRT-2015-11083 and HWPSIRT-2015-11089)

The vulnerability HWPSIRT-2015-11083 has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-8678, the vulnerability HWPSIRT-2015-11089 has been assigned CVE ID: CVE-2015-8679.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160105-01-smartphone-en