← Back

CVE-2016-8757

nvd nist
Published: Apr 2, 2017Modified: May 13, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions, EVA-CL10C00B192 and earlier versions allows attackers to obtain sensitive information from uninitialized memory.

Affected (4)

Products: Huawei: P9 Firmware
Huawei
1 product
P9 Firmware
Configuration A
4 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Huawei
P9 Firmware
From eva-al10 to eva-al10c00b192
P9 Firmware
From eva-cl10 to eva-cl10c00b192
P9 Firmware
From eva-dl10 to eva-dl10c00b192
P9 Firmware
From eva-tl10 to eva-tl10c00b192
Running on/withPlatform Versions
Huawei
P9
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

Source: psirt@huawei.com
Vendor Advisory
Source: psirt@huawei.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.