First published: Sun Apr 02 2017(Updated: )
The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to cause the system to restart.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei P9 Firmware | ||
Huawei P9 Firmware | ||
Huawei P9 Lite Firmware | <=vns-l21c185b130 | |
Huawei P9 Lite Firmware | ||
Huawei P8 Lite Firmware | <=ale-l02c636b150 | |
Huawei P8 Lite Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-8762 is classified as a medium severity vulnerability due to its potential impact on Huawei devices.
To fix CVE-2016-8762, update the Huawei P9, P9 Lite, or P8 Lite to the specified secure software versions.
CVE-2016-8762 affects Huawei P9, P9 Lite, and P8 Lite models with specific previous software versions.
CVE-2016-8762 is an input validation vulnerability in the TrustZone driver of affected Huawei devices.
While CVE-2016-8762 may require local access, an exploit could lead to significant system compromise.