CVEvulnerability

CVE-2016-8764

6.4 MEDIUM Published 2017-04-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-04-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.4 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.1 MEDIUM — AV:L/AC:M/Au:S/C:P/I:P/A:P
Weaknesses
CWE-20

Description

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and write user-mode memory data anywhere in the TrustZone driver.

Affected configurations

• huawei p9 firmware • huawei p9 lite firmware (<= vns-l21c185b130) • huawei p8 lite firmware (<= ale-l02c636b150)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References