Input validation

2017-04-0220:59:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%

JSON

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to cause the system to restart.

CPENameOperatorVersion
p8_lite_firmwareeq<= ale-l2c636b150
p9_lite_firmwareeq<= vns-l21c185b130

CPE	Name	Operator	Version
	p8_lite_firmware	eq	<= ale-l2c636b150
	p9_lite_firmware	eq	<= vns-l21c185b130

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en

www.securityfocus.com/bid/94509