Read the docs
TI-2015-06864 Aliases CVE-2015-8337GHSA-w4jh-24g4-h6xr

The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01…

Priority LOW 26Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, GRA-UL10 before GRA-UL10C00B220 and Mate7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 allows remote attackers to cause a denial of service (invalid memory access and reboot) via unspecified vectors related to "input null pointer as parameter."

Why it matters now

EPSS 0.00823 57th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:o:huawei:mate_7_firmware:mt7-cl00:*:*:*:*:*:*:*mt7-cl00VulnerableHuawei
cpe:2.3:o:huawei:mate_7_firmware:mt7-tl00:*:*:*:*:*:*:*mt7-tl00VulnerableHuawei
cpe:2.3:o:huawei:mate_7_firmware:mt7-tl10:*:*:*:*:*:*:*mt7-tl10VulnerableHuawei
cpe:2.3:o:huawei:mate_7_firmware:mt7-ul00:*:*:*:*:*:*:*mt7-ul00VulnerableHuawei
cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:p8_firmware:gra-cl10:*:*:*:*:*:*:*gra-cl10VulnerableHuawei
cpe:2.3:o:huawei:p8_firmware:gra-cl100:*:*:*:*:*:*:*gra-cl100VulnerableHuawei
cpe:2.3:o:huawei:p8_firmware:gra-tl00:*:*:*:*:*:*:*gra-tl00VulnerableHuawei
cpe:2.3:o:huawei:p8_firmware:gra-ul10:*:*:*:*:*:*:*gra-ul10VulnerableHuawei
cpe:2.3:o:huawei:p8_firmware:gra-ul100:*:*:*:*:*:*:*gra-ul100VulnerableHuawei
  • cpe:2.3:o:huawei:mate_7_firmware:mt7-cl00:*:*:*:*:*:*:* Versions mt7-cl00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:mate_7_firmware:mt7-tl00:*:*:*:*:*:*:* Versions mt7-tl00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:mate_7_firmware:mt7-tl10:*:*:*:*:*:*:* Versions mt7-tl10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:mate_7_firmware:mt7-ul00:*:*:*:*:*:*:* Versions mt7-ul00 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:mate_7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:gra-cl10:*:*:*:*:*:*:* Versions gra-cl10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:gra-cl100:*:*:*:*:*:*:* Versions gra-cl100 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:gra-tl00:*:*:*:*:*:*:* Versions gra-tl00 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:gra-ul10:*:*:*:*:*:*:* Versions gra-ul10 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p8_firmware:gra-ul100:*:*:*:*:*:*:* Versions gra-ul100 Vulnerable ·Huawei
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
  • cpe:2.3:h:huawei:p8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-8337
  2. 2026-10-03 Alias added: GHSA-w4jh-24g4-h6xr

References

Advisory 1

  • TI-2015-06731 Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software… CVSS 3.0HIGH 7.8
  • TI-2017-01935 Path traversal in Huawei P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8, CVSS 3.0HIGH 7.8
  • TI-2017-01934 Command injection in Huawei P8 Lite,Mate 7,Mate S,P8,honor 6,honor 7,SHOTX,G8, CVSS 3.0HIGH 7.8
  • TI-2015-03709 The tzdriver module in Huawei Mate 7 (Mate7-TL10) smartphones before… CVSS 3.0HIGH 7.5
  • TI-2015-03710 The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03… CVSS 3.0HIGH 7.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences