CVE-2016-8764: Input Validation
First published: Sun Apr 02 2017(Updated: )
The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and write user-mode memory data anywhere in the TrustZone driver.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei P9 Firmware | ||
| Huawei P9 | ||
| Huawei P9 Lite Firmware | <=vns-l21c185b130 | |
| HUAWEI P9 Lite | ||
| Huawei P8 Lite Firmware | <=ale-l02c636b150 | |
| Huawei P8 Lite |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/description
- agent/type
- agent/event
- agent/weakness
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei p9 firmware
- canonical/huawei p9
- canonical/huawei p9 lite firmware
- version/huawei p9 lite firmware/vns-l21c185b130
- canonical/huawei p9 lite
- canonical/huawei p8 lite firmware
- version/huawei p8 lite firmware/ale-l02c636b150
- canonical/huawei p8 lite