CVE-2016-8791: Input Validation
First published: Sun Apr 02 2017(Updated: )
Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C92B368, Versions before CRR-CL20C92B368, Versions before CRR-TL00C01B368, Versions before CRR-UL00C00B368, Versions before CRR-UL20C00B368; and P8 phones with software Versions before GRA-TL00C01B366, Versions before GRA-CL00C92B366, Versions before GRA-CL10C92B366, Versions before GRA-UL00C00B366, Versions before GRA-UL10C00B366 allow attackers with graphic or Camera privilege to crash the system or escalate privilege.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Mate S firmware | ||
| Huawei Mate S firmware | ||
| Huawei Mate 8 EMUI 4.1 Firmware | ||
| Huawei Mate 8 firmware | ||
| Huawei P8 Smartphone Firmware | ||
| Huawei P8 ALE-UL00 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-8791?
CVE-2016-8791 has a high severity rating due to the potential for unauthorized access to sensitive information.
How do I fix CVE-2016-8791?
To fix CVE-2016-8791, update your Huawei Mate 8 or Mate S device to the latest software version available from Huawei.
Which devices are affected by CVE-2016-8791?
The affected devices include Huawei Mate 8 and Mate S phones running specific outdated software versions.
What types of vulnerabilities does CVE-2016-8791 represent?
CVE-2016-8791 represents vulnerabilities related to improper input validation leading to potential information exposure.
Is there a workaround for CVE-2016-8791?
Currently, the best approach is to ensure your device software is up to date since there are no documented workarounds.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/huawei
- canonical/huawei mate s firmware
- canonical/huawei mate 8 emui 4.1 firmware
- canonical/huawei mate 8 firmware
- canonical/huawei p8 smartphone firmware
- canonical/huawei p8 ale-ul00