Vulnerabilities

TI-2017-12615 CVE-2017-17171 · GHSA-5fxj-3vg5-qmf8

Improper input validation in HUAWEI Mate 8; HUAWEI P9; HUAWEI P9 Plus

LOW 20

Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters.

CVSS 3.0MEDIUM 4.2 Local High privileges User interaction EPSS 0.00474 Published 2018-06-01 No fix listed CWE-20

TI-2016-07239 CVE-2016-8794 · GHSA-gcqp-jx79-4gc5

Improper access control in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions…

LOW 32

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C…

CVSS 3.0HIGH 7.1 Network Low privileges User interaction EPSS 0.00566 Published 2017-04-02 No fix listed CWE-284

TI-2016-07238 CVE-2016-8793 · GHSA-gvrc-8crj-444w

Improper access control in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions…

LOW 29

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C…

CVSS 3.0MEDIUM 6.7 Local Low privileges User interaction EPSS 0.00207 Published 2017-04-02 No fix listed CWE-284

TI-2016-07237 CVE-2016-8792 · GHSA-j5hq-qf3j-7rj7

Improper access control in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions…

LOW 32

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C…

CVSS 3.0HIGH 7.1 Network Low privileges User interaction EPSS 0.00628 Published 2017-04-02 No fix listed CWE-284

TI-2016-07236 CVE-2016-8791 · GHSA-5ggc-ch47-xxr3

Improper access control in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions…

LOW 32

Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions before NXT-DL00C17B386, Versions before NXT-TL00C01B386; Mate S phones with software Versions before CRR-CL00C…

CVSS 3.0HIGH 7.1 Network Low privileges User interaction EPSS 0.00628 Published 2017-04-02 No fix listed CWE-284

TI-2016-07223 CVE-2016-8774 · GHSA-f7c8-g434-h6h5

Memory corruption in Mate 8,Mate S,P8,P9 Versions before NXT-AL10C00B386,Versions before…

LOW 30

The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, versions before NXT-CL00C92B386, versions before NXT-DL00C17B386, versions before NXT-TL00C01B386; Mate S phones with software Versio…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00319 Published 2017-04-02 No fix listed CWE-119

TI-2016-07213 CVE-2016-8758 · GHSA-wpf6-86vf-246w

Improper input validation in Mate8 NXT-AL10C00B561 and earlier versions,NXT-CL10C00B561…

LOW 26

ION memory management module in Huawei Mate8 phones with software NXT-AL10C00B561 and earlier versions, NXT-CL10C00B561 and earlier versions, NXT-DL10C00B561 and earlier versions, NXT-TL10C00B561 and earlier versions all…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00555 Published 2017-04-02 No fix listed CWE-20

TI-2016-07211 CVE-2016-8756 · GHSA-r6fj-xwcv-2393

Improper input validation in Mate8 NXT-AL10C00B197 and earlier versions,NXT-DL10C00B197…

LOW 26

ION memory management module in Huawei Mate 8 phones with software NXT-AL10C00B197 and earlier versions, NXT-DL10C00B197 and earlier versions, NXT-TL10C00B197 and earlier versions, NXT-CL10C00B197 and earlier versions al…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00555 Published 2017-04-02 No fix listed CWE-20

TI-2016-04532 CVE-2016-5232 · GHSA-225x-576g-4f7p

Buffer overflow in Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before…

LOW 25

Buffer overflow in Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of service (system crash)…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.00526 Published 2016-06-30 No fix listed CWE-119

TI-2016-04531 CVE-2016-5231 · GHSA-52xj-6c8j-4pv2

Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before…

LOW 35

Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.00569 Published 2016-06-30 No fix listed CWE-264

TI-2016-04530 CVE-2016-5230 · GHSA-44xg-wcj6-rg4h

Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before…

LOW 39

Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and control partial module function…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00725 Published 2016-06-30 No fix listed CWE-264

TI-2016-04533 CVE-2016-5233 · GHSA-mm84-6w4q-wmwp

Huawei Mate 8 smartphones with software NXT-AL10 before NXT-AL10C00B182, NXT-CL00 before…

LOW 18

Huawei Mate 8 smartphones with software NXT-AL10 before NXT-AL10C00B182, NXT-CL00 before NXT-CL00C92B182, NXT-DL00 before NXT-DL00C17B182, and NXT-TL00 before NXT-TL00C01B182 allow remote base stations to obtain sensitiv…

CVSS 3.0LOW 3.7 Network No auth No interaction EPSS 0.00525 Published 2016-06-10 No fix listed CWE-200

TI-2016-03116 CVE-2016-3681 · GHSA-gjc8-fq6q-5v9x

Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182…

LOW 35

Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of se…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0066 Published 2016-05-26 No fix listed CWE-119

TI-2016-03115 CVE-2016-3680 · GHSA-chc4-mg8m-pm7q

Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182…

LOW 35

Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to cause a denial of se…

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0066 Published 2016-05-26 No fix listed CWE-119

Vulnerabilities

Filters