First published: Thu Apr 07 2016(Updated: )
The ovisp driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application with the camera permission, aka an "interface access control vulnerability."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei P8 ALE-UL00 | ||
Huawei P8 firmware | =gra-cl00 | |
Huawei P8 firmware | =gra-cl10 | |
Huawei P8 firmware | =gra-tl00 | |
Huawei P8 firmware | =gra-ul00 | |
Huawei P8 firmware | =gra-ul10 | |
Huawei Mate S firmware | ||
Huawei Mate S firmware | =crr-cl00 | |
Huawei Mate S firmware | =crr-tl00 | |
Huawei Mate S firmware | =crr-ul00 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2015-8681 is classified as moderate due to the potential for unauthorized access to sensitive user data.
To resolve CVE-2015-8681, users need to update their Huawei P8 or Mate S smartphones to the latest firmware version provided by Huawei.
CVE-2015-8681 affects specific models of Huawei P8 and Mate S smartphones running older firmware versions.
Affected firmware versions for Huawei P8 include GRA-TL00, GRA-CL00, GRA-CL10, GRA-UL00, and GRA-UL10, while Mate S is affected if running the CRR-TL00 firmware.
Using Huawei P8 or Mate S without updating exposes the device to potential security risks associated with CVE-2015-8681.