CVE-2015-8088: Buffer Overflow

Published Jan 12, 2016
·
Updated

Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application.

Affected Software

11 affected components
Huawei P8 Firmware=gra-cl10
Huawei P8 Firmware=gra-cl100
Huawei P8 Firmware=gra-tl00
Huawei P8 Firmware=gra-ul10
Huawei P8 Firmware=gra-ul100
Huawei P8
Huawei Mate 7 Firmware=mt7-cl00
Huawei Mate 7 Firmware=mt7-tl00
Huawei Mate 7 Firmware=mt7-tl10
Huawei Mate 7 Firmware=mt7-ul00
Huawei Mate 7

Event History

Jan 12, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2015-8088?

CVE-2015-8088 has a high severity due to the potential for remote code execution via the heap-based buffer overflow.

2

How do I fix CVE-2015-8088?

To fix CVE-2015-8088, update the Huawei Mate 7 or P8 firmware to the latest version provided by Huawei that addresses this vulnerability.

3

Which devices are affected by CVE-2015-8088?

CVE-2015-8088 affects Huawei Mate 7 and P8 phones running specific outdated firmware versions.

4

What type of vulnerability is CVE-2015-8088?

CVE-2015-8088 is categorized as a heap-based buffer overflow vulnerability.

5

What can an attacker do exploiting CVE-2015-8088?

An attacker exploiting CVE-2015-8088 could execute arbitrary code on the affected device, leading to a full compromise.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203