First published: Sun Apr 02 2017(Updated: )
The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, versions before NXT-CL00C92B386, versions before NXT-DL00C17B386, versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before CRR-TL00C01B368, Versions before CRR-UL00C00B368, Versions before CRR-UL20C00B368; P8 phones with software Versions before GRA-TL00C01B366, Versions before GRA-CL00C92B366, Versions before GRA-CL10C92B366, Versions before GRA-UL00C00B366, Versions before GRA-UL10C00B366; and P9 phones with software Versions before EVA-AL10C00B190, Versions before EVA-DL10C00B190, Versions before EVA-TL10C00B190, Versions before EVA-CL10C00B190 allows attackers to get root privilege or crash the system or execute arbitrary code, related to a buffer overflow.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei Mate 8 firmware | ||
Huawei Mate 8 firmware | ||
Huawei Mate S firmware | ||
Huawei Mate S firmware | ||
Huawei P8 firmware | ||
Huawei P8 ALE-UL00 | ||
Huawei P9 Firmware | ||
Huawei P9 Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-8774 has a high severity rating due to the potential for arbitrary code execution.
To fix CVE-2016-8774, update your Huawei Mate 8 or Mate S to the latest firmware version as specified in the security advisory.
CVE-2016-8774 affects Huawei Mate 8 and Mate S devices on specific software versions prior to the updates mentioned.
CVE-2016-8774 is classified as a vulnerability in the HIFI driver that may allow remote exploitation.
There is no effective workaround for CVE-2016-8774; the recommended action is to apply the firmware update.