Improper authorization in P9, P9 Lite…
Priority LOW 21CWE-285Published · Updated
Key facts
- Attack vector
- Physical
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-285.
Summary
Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account.
Why it matters now
EPSS 0.00361 30th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | P9, P9 Lite EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00,VNS-L21C185, | P9, P9 Lite EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00,VNS-L21C185, | — | No fix listed | CNA |
- P9, P9 Lite EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00,VNS-L21C185, Vendor— Affected P9, P9 Lite EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00,VNS-L21C185, Fixed in — No fix listed CNA
CPE configurations NVD · 7
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:p9_firmware:eva-al10c00:*:*:*:*:*:*:* | eva-al10c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:p9_firmware:eva-cl10c00:*:*:*:*:*:*:* | eva-cl10c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:p9_firmware:eva-dl10c00:*:*:*:*:*:*:* | eva-dl10c00 | Vulnerable | Huawei |
| cpe:2.3:o:huawei:p9_firmware:eva-tl10c00:*:*:*:*:*:*:* | eva-tl10c00 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:p9_lite_firmware:vns-l21c185:*:*:*:*:*:*:* | vns-l21c185 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:p9_firmware:eva-al10c00:*:*:*:*:*:*:* Versions eva-al10c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:p9_firmware:eva-cl10c00:*:*:*:*:*:*:* Versions eva-cl10c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:p9_firmware:eva-dl10c00:*:*:*:*:*:*:* Versions eva-dl10c00 Vulnerable ·Huawei
- cpe:2.3:o:huawei:p9_firmware:eva-tl10c00:*:*:*:*:*:*:* Versions eva-tl10c00 Vulnerable ·Huawei
- cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:p9_lite_firmware:vns-l21c185:*:*:*:*:*:*:* Versions vns-l21c185 Vulnerable ·Huawei
- cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2016-8776
- 2026-10-03 Alias added: GHSA-vc8h-576h-jh5w
References
More Huawei P9 Firmware vulnerabilities
- TI-2017-05725 Memory corruption in Huawei P10, P10 Plus CVSS 3.0HIGH 7.8
- TI-2016-07216 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
- TI-2016-07215 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
- TI-2016-07214 Memory corruption in P9,Honor 6 Versions before EVA-AL10C00B192,Versions before… CVSS 3.0HIGH 7.8
- TI-2016-07218 The TrustZone driver in Huawei P9 phones with software Versions earlier than… CVSS 3.0HIGH 7.8
- TI-2017-01945 Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before… CVSS 3.0MEDIUM 6.8
Sources
- CVE-2016-8776 · CVE Program
- CVE-2016-8776 · NVD
- FIRST EPSS
- GHSA-vc8h-576h-jh5w · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences