PT-2017-9788

CVE-2016-8758

Published

2017-04-02

Updated

2017-04-07

Description by

CVSS 2.0

7.1

High

MetricsAV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions Huawei Mate8 phones with software NXT-CL10C00B561 and earlier versions Huawei Mate8 phones with software NXT-DL10C00B561 and earlier versions Huawei Mate8 phones with software NXT-TL10C00B561 and earlier versions

Description The issue in the ION memory management module allows attackers to cause a denial of service, which can result in the device restarting.

Recommendations For Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, update to a version later than NXT-AL10C00B561. For Huawei Mate8 phones with software NXT-CL10C00B561 and earlier versions, update to a version later than NXT-CL10C00B561. For Huawei Mate8 phones with software NXT-DL10C00B561 and earlier versions, update to a version later than NXT-DL10C00B561. For Huawei Mate8 phones with software NXT-TL10C00B561 and earlier versions, update to a version later than NXT-TL10C00B561.

Exploitability

Fix

Impacts

Researchers

Dongdong She

Hang Zhang

Zhiyun Qian

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers