First published: Thu Apr 07 2016(Updated: )
Heap-based buffer overflow in the HIFI driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, a different vulnerability than CVE-2015-8318.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Mate S firmware | ||
Huawei Mate S firmware | =crr-cl00 | |
Huawei Mate S firmware | =crr-tl00 | |
Huawei Mate S firmware | =crr-ul00 | |
Huawei P8 ALE-UL00 | ||
Huawei P8 firmware | =gra-cl00 | |
Huawei P8 firmware | =gra-cl10 | |
Huawei P8 firmware | =gra-tl00 | |
Huawei P8 firmware | =gra-ul00 | |
Huawei P8 firmware | =gra-ul10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-8319 has been rated as critical due to the potential for a heap-based buffer overflow that can lead to arbitrary code execution.
To mitigate CVE-2015-8319, users should update their Huawei P8 or Mate S smartphones to the latest firmware versions provided by Huawei.
CVE-2015-8319 affects Huawei P8 and Mate S smartphones running specific older firmware versions.
The potential impacts of CVE-2015-8319 include unauthorized access, data leakage, and complete compromise of the device.
As of now, there have been no public reports of active exploits targeting CVE-2015-8319.