← Back

CVE-2016-8764

nvd nist
Published: Apr 2, 2017Modified: May 13, 2026

JSON object

Loading...
6.4
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.5 / Impact: 5.9
Source: NVD

Description

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and write user-mode memory data anywhere in the TrustZone driver.

Affected (3)

Huawei
3 products
P9 Firmware
P9 Lite Firmware
P8 Lite Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
P9 Firmware
All versions
Running on/withPlatform Versions
Huawei
P9
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
P9 Lite Firmware
Up to vns-l21c185b130
Running on/withPlatform Versions
Huawei
P9 Lite
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
P8 Lite Firmware
Up to ale-l02c636b150
Running on/withPlatform Versions
Huawei
P8 Lite
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: psirt@huawei.com
Vendor Advisory
Source: psirt@huawei.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.