Read the docs
TI-2015-06731 Aliases CVE-2015-8088GHSA-8fwf-4r37-rc6g

Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software…

Priority MEDIUM 41CWE-119Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application.

Why it matters now

EPSS 0.03811 90th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:o:huawei:p8_firmware:gra-cl10:*:*:*:*:*:*:*gra-cl10VulnerableHuawei
cpe:2.3:o:huawei:p8_firmware:gra-cl100:*:*:*:*:*:*:*gra-cl100VulnerableHuawei
cpe:2.3:o:huawei:p8_firmware:gra-tl00:*:*:*:*:*:*:*gra-tl00VulnerableHuawei
cpe:2.3:o:huawei:p8_firmware:gra-ul10:*:*:*:*:*:*:*gra-ul10VulnerableHuawei
cpe:2.3:o:huawei:p8_firmware:gra-ul100:*:*:*:*:*:*:*gra-ul100VulnerableHuawei
cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:mate_7_firmware:mt7-cl00:*:*:*:*:*:*:*mt7-cl00VulnerableHuawei
cpe:2.3:o:huawei:mate_7_firmware:mt7-tl00:*:*:*:*:*:*:*mt7-tl00VulnerableHuawei
cpe:2.3:o:huawei:mate_7_firmware:mt7-tl10:*:*:*:*:*:*:*mt7-tl10VulnerableHuawei
cpe:2.3:o:huawei:mate_7_firmware:mt7-ul00:*:*:*:*:*:*:*mt7-ul00VulnerableHuawei
  • cpe:2.3:o:huawei:p8_firmware:gra-cl10:*:*:*:*:*:*:* Versions gra-cl10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:gra-cl100:*:*:*:*:*:*:* Versions gra-cl100 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:gra-tl00:*:*:*:*:*:*:* Versions gra-tl00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:gra-ul10:*:*:*:*:*:*:* Versions gra-ul10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:gra-ul100:*:*:*:*:*:*:* Versions gra-ul100 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:mate_7_firmware:mt7-cl00:*:*:*:*:*:*:* Versions mt7-cl00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:mate_7_firmware:mt7-tl00:*:*:*:*:*:*:* Versions mt7-tl00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:mate_7_firmware:mt7-tl10:*:*:*:*:*:*:* Versions mt7-tl10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:mate_7_firmware:mt7-ul00:*:*:*:*:*:*:* Versions mt7-ul00 Vulnerable ·Huawei
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-8088
  2. 2026-10-03 Alias added: GHSA-8fwf-4r37-rc6g
  3. 2026-10-23 EPSS moved to the 90th–95th percentile
  4. 2026-10-25 EPSS moved to the 50th–90th percentile
  5. 2026-10-28 EPSS moved to the 90th–95th percentile

References

Advisory 1

  • TI-2017-01935 Path traversal in Huawei P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8, CVSS 3.0HIGH 7.8
  • TI-2017-01934 Command injection in Huawei P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8, CVSS 3.0HIGH 7.8
  • TI-2015-03709 The tzdriver module in Huawei Mate 7 (Mate7-TL10) smartphones before… CVSS 3.0HIGH 7.5
  • TI-2015-03710 The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03… CVSS 3.0HIGH 7.0
  • TI-2015-06864 The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01… CVSS 3.0MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences