Search

Find a vulnerability

Search criteria

    5 vulnerabilities found for p7 by huawei

    VAR-201704-0295

    Vulnerability from variot - Updated: 2025-04-20 23:32

    Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) by leveraging camera permissions and via crafted input to the camera driver. HuaweiP7 and P8 Youth Edition are both Huawei's smartphone devices. An attacker could use the vulnerability to enter an illegal parameter into the camera driver by tricking the user into installing a malicious application and obtaining the system or camera privileges of the device, causing the system to crash. The following products and versions are affected: Huawei P7 earlier than P7-L00C17B851, earlier than P7-L05C00B851, earlier than P7-L09C92B851; P8 Youth Edition earlier than ALE-UL00B211

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-201704-0295",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "p8 ale-ul00",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "*"
          },
          {
            "model": "p7",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l00c17b851"
          },
          {
            "model": "p7",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l05c00b851"
          },
          {
            "model": "p7",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l09c92b851"
          },
          {
            "model": "p8 ale-ul00",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "ale-ul00b211"
          },
          {
            "model": "p7 \u003cp7-l00c17b851",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7 \u003cp7-l05c00b851",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7 \u003cp7-l09c92b851",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p8 ale-ul00 \u003cale-ul00b211",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-764"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8223"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/a:huawei:p7_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:huawei:p8_ale-ul00_firmware",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          }
        ]
      },
      "cve": "CVE-2015-8223",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "COMPLETE",
                "baseScore": 4.9,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 3.9,
                "id": "CVE-2015-8223",
                "impactScore": 6.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 1.8,
                "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "HIGH",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "COMPLETE",
                "baseScore": 4.0,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 1.9,
                "id": "CNVD-2017-08780",
                "impactScore": 6.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 0.6,
                "vectorString": "AV:L/AC:H/Au:N/C:N/I:N/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "VULHUB",
                "availabilityImpact": "COMPLETE",
                "baseScore": 4.9,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 3.9,
                "id": "VHN-86184",
                "impactScore": 6.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 0.1,
                "vectorString": "AV:L/AC:L/AU:N/C:N/I:N/A:C",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "author": "nvd@nist.gov",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 1.8,
                "id": "CVE-2015-8223",
                "impactScore": 3.6,
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "trust": 1.8,
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2015-8223",
                "trust": 1.0,
                "value": "MEDIUM"
              },
              {
                "author": "NVD",
                "id": "CVE-2015-8223",
                "trust": 0.8,
                "value": "Medium"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2017-08780",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-201704-764",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "VULHUB",
                "id": "VHN-86184",
                "trust": 0.1,
                "value": "MEDIUM"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86184"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-764"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8223"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) by leveraging camera permissions and via crafted input to the camera driver. HuaweiP7 and P8 Youth Edition are both Huawei\u0027s smartphone devices. An attacker could use the vulnerability to enter an illegal parameter into the camera driver by tricking the user into installing a malicious application and obtaining the system or camera privileges of the device, causing the system to crash. The following products and versions are affected: Huawei P7 earlier than P7-L00C17B851, earlier than P7-L05C00B851, earlier than P7-L09C92B851; P8 Youth Edition earlier than ALE-UL00B211",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2015-8223"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86184"
          }
        ],
        "trust": 2.25
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2015-8223",
            "trust": 3.1
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526",
            "trust": 0.8
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-764",
            "trust": 0.7
          },
          {
            "db": "CNVD",
            "id": "CNVD-2017-08780",
            "trust": 0.6
          },
          {
            "db": "VULHUB",
            "id": "VHN-86184",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86184"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-764"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8223"
          }
        ]
      },
      "id": "VAR-201704-0295",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86184"
          }
        ],
        "trust": 1.325
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          }
        ]
      },
      "last_update_date": "2025-04-20T23:32:14.524000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "Huawei-SA-20151106-01-Camera",
            "trust": 0.8,
            "url": "http://www.huawei.com/en/psirt/security-advisories/hw-460489"
          },
          {
            "title": "HuaweiP7 and P8 Youth Edition Denial of Service Vulnerability Patch",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/95000"
          },
          {
            "title": "Huawei P7  and P8 Youth version security vulnerabilities",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=70695"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-764"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "CWE-275",
            "trust": 1.9
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-86184"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8223"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.3,
            "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460489.htm"
          },
          {
            "trust": 0.8,
            "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-8223"
          },
          {
            "trust": 0.8,
            "url": "https://nvd.nist.gov/vuln/detail/cve-2015-8223"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86184"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-764"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8223"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86184"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-764"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8223"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2017-06-08T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          },
          {
            "date": "2017-04-13T00:00:00",
            "db": "VULHUB",
            "id": "VHN-86184"
          },
          {
            "date": "2017-05-18T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          },
          {
            "date": "2017-04-13T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201704-764"
          },
          {
            "date": "2017-04-13T14:59:00.933000",
            "db": "NVD",
            "id": "CVE-2015-8223"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2017-06-08T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2017-08780"
          },
          {
            "date": "2017-04-25T00:00:00",
            "db": "VULHUB",
            "id": "VHN-86184"
          },
          {
            "date": "2017-05-18T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          },
          {
            "date": "2017-06-07T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201704-764"
          },
          {
            "date": "2025-04-20T01:37:25.860000",
            "db": "NVD",
            "id": "CVE-2015-8223"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "local",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-764"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Huawei P7 and  P8 ALE-UL00 Service disruption in  (DoS) Vulnerabilities",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007526"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "lack of information",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-764"
          }
        ],
        "trust": 0.6
      }
    }

    VAR-201705-1958

    Vulnerability from variot - Updated: 2025-04-20 23:27

    The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 before P7-L09C92B851 allows local users to read or write to arbitrary kernel memory locations and consequently cause a denial of service (system crash) or gain privileges via a crafted application. HuaweiP7 is a smartphone from China's Huawei company. GPUdriver is a graphics processor driver used in it. The GPU driver in HuaweiP7 has a privilege escalation vulnerability that stems from the GPU's failure to adequately verify the validity of incoming parameters. A local attacker can use this vulnerability to spoof a user to install a malicious application to read and modify the memory address of the product, causing a system crash or privilege escalation. Huawei P7 is prone to a local privilege-escalation vulnerability. Local attackers may exploit this issue to gain elevated privileges. The following versions are affected: Huawei P7 versions prior to P7-L00C17B851, versions prior to P7-L05C00B851, versions prior to P7-L09C92B851

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-201705-1958",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "p7-l09",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7-l05",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7-l00",
            "scope": "eq",
            "trust": 1.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7-l00",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l00c17b851"
          },
          {
            "model": "p7-l05",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l05c00b851"
          },
          {
            "model": "p7-l09",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l09c92b851"
          },
          {
            "model": "p7 \u003cp7-l00c17b851",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7 \u003cp7-l05c00b851",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7",
            "scope": "eq",
            "trust": 0.3,
            "vendor": "huawei",
            "version": "0"
          },
          {
            "model": "p7 p7-l09c92b851",
            "scope": "ne",
            "trust": 0.3,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7 p7-l05c00b851",
            "scope": "ne",
            "trust": 0.3,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7 p7-l00c17b851",
            "scope": "ne",
            "trust": 0.3,
            "vendor": "huawei",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          },
          {
            "db": "BID",
            "id": "98623"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201705-1165"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8089"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/o:huawei:p7-l00_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:huawei:p7-l05_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:huawei:p7-l09_firmware",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          }
        ]
      },
      "credits": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/credits#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Hang Zhang/ Dongdong She/Zhiyun Qian from University of California, Riverside and by Yanfeng Wang/Chiachih Wu/ Xuxian Jiang of C0RE Team from Qihoo 360",
        "sources": [
          {
            "db": "BID",
            "id": "98623"
          }
        ],
        "trust": 0.3
      },
      "cve": "CVE-2015-8089",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "MEDIUM",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "COMPLETE",
                "baseScore": 6.9,
                "confidentialityImpact": "COMPLETE",
                "exploitabilityScore": 3.4,
                "id": "CVE-2015-8089",
                "impactScore": 10.0,
                "integrityImpact": "COMPLETE",
                "severity": "MEDIUM",
                "trust": 1.8,
                "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "HIGH",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "COMPLETE",
                "baseScore": 6.2,
                "confidentialityImpact": "COMPLETE",
                "exploitabilityScore": 1.9,
                "id": "CNVD-2017-08782",
                "impactScore": 10.0,
                "integrityImpact": "COMPLETE",
                "severity": "MEDIUM",
                "trust": 0.6,
                "vectorString": "AV:L/AC:H/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "MEDIUM",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "VULHUB",
                "availabilityImpact": "COMPLETE",
                "baseScore": 6.9,
                "confidentialityImpact": "COMPLETE",
                "exploitabilityScore": 3.4,
                "id": "VHN-86050",
                "impactScore": 10.0,
                "integrityImpact": "COMPLETE",
                "severity": "MEDIUM",
                "trust": 0.1,
                "vectorString": "AV:L/AC:M/AU:N/C:C/I:C/A:C",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "author": "nvd@nist.gov",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "exploitabilityScore": 1.8,
                "id": "CVE-2015-8089",
                "impactScore": 5.9,
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "trust": 1.8,
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2015-8089",
                "trust": 1.0,
                "value": "HIGH"
              },
              {
                "author": "NVD",
                "id": "CVE-2015-8089",
                "trust": 0.8,
                "value": "High"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2017-08782",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-201705-1165",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "VULHUB",
                "id": "VHN-86050",
                "trust": 0.1,
                "value": "MEDIUM"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86050"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201705-1165"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8089"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 before P7-L09C92B851 allows local users to read or write to arbitrary kernel memory locations and consequently cause a denial of service (system crash) or gain privileges via a crafted application. HuaweiP7 is a smartphone from China\u0027s Huawei company. GPUdriver is a graphics processor driver used in it. The GPU driver in HuaweiP7 has a privilege escalation vulnerability that stems from the GPU\u0027s failure to adequately verify the validity of incoming parameters. A local attacker can use this vulnerability to spoof a user to install a malicious application to read and modify the memory address of the product, causing a system crash or privilege escalation. Huawei P7 is prone to a local privilege-escalation vulnerability. \nLocal attackers may exploit this issue to gain elevated privileges. The following versions are affected: Huawei P7 versions prior to P7-L00C17B851, versions prior to P7-L05C00B851, versions prior to P7-L09C92B851",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2015-8089"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          },
          {
            "db": "BID",
            "id": "98623"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86050"
          }
        ],
        "trust": 2.52
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2015-8089",
            "trust": 3.4
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568",
            "trust": 0.8
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201705-1165",
            "trust": 0.7
          },
          {
            "db": "CNVD",
            "id": "CNVD-2017-08782",
            "trust": 0.6
          },
          {
            "db": "BID",
            "id": "98623",
            "trust": 0.4
          },
          {
            "db": "VULHUB",
            "id": "VHN-86050",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86050"
          },
          {
            "db": "BID",
            "id": "98623"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201705-1165"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8089"
          }
        ]
      },
      "id": "VAR-201705-1958",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86050"
          }
        ],
        "trust": 1.325
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          }
        ]
      },
      "last_update_date": "2025-04-20T23:27:24.916000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "Huawei-SA-20151103-01-GPU",
            "trust": 0.8,
            "url": "http://www.huawei.com/en/psirt/security-advisories/hw-460276"
          },
          {
            "title": "HuaweiP7GPU Driver Licensing Vulnerability Patch",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/94995"
          },
          {
            "title": "Huawei P7 GPU Fixes for driver permission and access control vulnerabilities",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=70537"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201705-1165"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "CWE-264",
            "trust": 1.9
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-86050"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8089"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.3,
            "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460276.htm"
          },
          {
            "trust": 0.8,
            "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-8089"
          },
          {
            "trust": 0.8,
            "url": "https://nvd.nist.gov/vuln/detail/cve-2015-8089"
          },
          {
            "trust": 0.3,
            "url": "http://www.huawei.com"
          },
          {
            "trust": 0.3,
            "url": "http://www.huawei.com/en/psirt/security-advisories/hw-460276"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86050"
          },
          {
            "db": "BID",
            "id": "98623"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201705-1165"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8089"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86050"
          },
          {
            "db": "BID",
            "id": "98623"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201705-1165"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8089"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2017-06-08T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          },
          {
            "date": "2017-05-23T00:00:00",
            "db": "VULHUB",
            "id": "VHN-86050"
          },
          {
            "date": "2015-11-03T00:00:00",
            "db": "BID",
            "id": "98623"
          },
          {
            "date": "2017-06-26T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          },
          {
            "date": "2017-05-24T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201705-1165"
          },
          {
            "date": "2017-05-23T04:29:01.070000",
            "db": "NVD",
            "id": "CVE-2015-8089"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2017-06-08T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2017-08782"
          },
          {
            "date": "2017-06-06T00:00:00",
            "db": "VULHUB",
            "id": "VHN-86050"
          },
          {
            "date": "2015-11-03T00:00:00",
            "db": "BID",
            "id": "98623"
          },
          {
            "date": "2017-06-26T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          },
          {
            "date": "2017-05-24T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201705-1165"
          },
          {
            "date": "2025-04-20T01:37:25.860000",
            "db": "NVD",
            "id": "CVE-2015-8089"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "local",
        "sources": [
          {
            "db": "BID",
            "id": "98623"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201705-1165"
          }
        ],
        "trust": 0.9
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "plural  Huawei P7 Software  GPU Vulnerability in driver to read / write arbitrary kernel memory area",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007568"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "permissions and access control",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201705-1165"
          }
        ],
        "trust": 0.6
      }
    }

    VAR-201704-0395

    Vulnerability from variot - Updated: 2025-04-20 23:26

    Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) via vectors involving an application that passes crafted input to the GPU driver. HuaweiP7 and P8 Youth Edition are both Huawei's smartphone devices. GPUdriver is one of the graphics drivers. A refusal service vulnerability exists in the GPU drivers in HuaweiP7 and P8 Youth. An attacker could exploit the vulnerability to trick the phone system into crashes by tricking the user into installing a malicious application and entering an illegal parameter into the product's graphics processing unit (GPU) driver. The following products and versions are affected: Huawei P7-L00C17B851 earlier, P7-L05C00B851 earlier, P7-L09C92B851 earlier; P8 Youth Edition ALE-UL00B211 earlier

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-201704-0395",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "p7",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "*"
          },
          {
            "model": "p8 ale-ul00",
            "scope": "eq",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "*"
          },
          {
            "model": "p7",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l00c17b851"
          },
          {
            "model": "p7",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l05c00b851"
          },
          {
            "model": "p7",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l09c92b851"
          },
          {
            "model": "p8 ale-ul00",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "ale-ul00b211"
          },
          {
            "model": "p7 \u003cp7-l00c17b851",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7 \u003cp7-l05c00b851",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7 \u003cp7-l09c92b851",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p8 ale-ul00 \u003cale-ul00b211",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p8 ale-ul00",
            "scope": null,
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-765"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-7740"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/a:huawei:p7_firmware",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/o:huawei:p8_ale-ul00_firmware",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          }
        ]
      },
      "cve": "CVE-2015-7740",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "COMPLETE",
                "baseScore": 4.9,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 3.9,
                "id": "CVE-2015-7740",
                "impactScore": 6.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 1.8,
                "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "HIGH",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "COMPLETE",
                "baseScore": 4.0,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 1.9,
                "id": "CNVD-2017-08779",
                "impactScore": 6.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 0.6,
                "vectorString": "AV:L/AC:H/Au:N/C:N/I:N/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "VULHUB",
                "availabilityImpact": "COMPLETE",
                "baseScore": 4.9,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 3.9,
                "id": "VHN-85701",
                "impactScore": 6.9,
                "integrityImpact": "NONE",
                "severity": "MEDIUM",
                "trust": 0.1,
                "vectorString": "AV:L/AC:L/AU:N/C:N/I:N/A:C",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "author": "nvd@nist.gov",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 1.8,
                "id": "CVE-2015-7740",
                "impactScore": 3.6,
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "trust": 1.8,
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2015-7740",
                "trust": 1.0,
                "value": "MEDIUM"
              },
              {
                "author": "NVD",
                "id": "CVE-2015-7740",
                "trust": 0.8,
                "value": "Medium"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2017-08779",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-201704-765",
                "trust": 0.6,
                "value": "MEDIUM"
              },
              {
                "author": "VULHUB",
                "id": "VHN-85701",
                "trust": 0.1,
                "value": "MEDIUM"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          },
          {
            "db": "VULHUB",
            "id": "VHN-85701"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-765"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-7740"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users to cause a denial of service (OS crash) via vectors involving an application that passes crafted input to the GPU driver. HuaweiP7 and P8 Youth Edition are both Huawei\u0027s smartphone devices. GPUdriver is one of the graphics drivers. A refusal service vulnerability exists in the GPU drivers in HuaweiP7 and P8 Youth. An attacker could exploit the vulnerability to trick the phone system into crashes by tricking the user into installing a malicious application and entering an illegal parameter into the product\u0027s graphics processing unit (GPU) driver. The following products and versions are affected: Huawei P7-L00C17B851 earlier, P7-L05C00B851 earlier, P7-L09C92B851 earlier; P8 Youth Edition ALE-UL00B211 earlier",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2015-7740"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          },
          {
            "db": "VULHUB",
            "id": "VHN-85701"
          }
        ],
        "trust": 2.25
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2015-7740",
            "trust": 3.1
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525",
            "trust": 0.8
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-765",
            "trust": 0.7
          },
          {
            "db": "CNVD",
            "id": "CNVD-2017-08779",
            "trust": 0.6
          },
          {
            "db": "VULHUB",
            "id": "VHN-85701",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          },
          {
            "db": "VULHUB",
            "id": "VHN-85701"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-765"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-7740"
          }
        ]
      },
      "id": "VAR-201704-0395",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          },
          {
            "db": "VULHUB",
            "id": "VHN-85701"
          }
        ],
        "trust": 1.325
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          }
        ]
      },
      "last_update_date": "2025-04-20T23:26:07.652000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "Huawei-SA-20151106-01-GPU",
            "trust": 0.8,
            "url": "http://www.huawei.com/en/psirt/security-advisories/hw-460486"
          },
          {
            "title": "HuaweiP7 and P8 Youth Edition GPU Driver Denial of Service Vulnerability Patch",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/94998"
          },
          {
            "title": "Huawei P7  and P8 Youth version GPU Driver input verification vulnerabilities",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=70696"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-765"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "CWE-20",
            "trust": 1.9
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-85701"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-7740"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.3,
            "url": "http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460486.htm"
          },
          {
            "trust": 0.8,
            "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-7740"
          },
          {
            "trust": 0.8,
            "url": "https://nvd.nist.gov/vuln/detail/cve-2015-7740"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          },
          {
            "db": "VULHUB",
            "id": "VHN-85701"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-765"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-7740"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          },
          {
            "db": "VULHUB",
            "id": "VHN-85701"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-765"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-7740"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2017-06-08T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          },
          {
            "date": "2017-04-13T00:00:00",
            "db": "VULHUB",
            "id": "VHN-85701"
          },
          {
            "date": "2017-05-18T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          },
          {
            "date": "2017-04-13T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201704-765"
          },
          {
            "date": "2017-04-13T14:59:00.870000",
            "db": "NVD",
            "id": "CVE-2015-7740"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2017-06-09T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2017-08779"
          },
          {
            "date": "2017-04-25T00:00:00",
            "db": "VULHUB",
            "id": "VHN-85701"
          },
          {
            "date": "2017-05-18T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          },
          {
            "date": "2017-06-07T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201704-765"
          },
          {
            "date": "2025-04-20T01:37:25.860000",
            "db": "NVD",
            "id": "CVE-2015-7740"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "local",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-765"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Huawei P7 and  P8 ALE-UL00 Service disruption in  (DoS) Vulnerabilities",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007525"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "input validation",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201704-765"
          }
        ],
        "trust": 0.6
      }
    }

    VAR-201604-0443

    Vulnerability from variot - Updated: 2025-04-12 23:32

    Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or camera permission. HuaweiSmartPhones7 is a smart phone from China Huawei. HuaweiSmartPhones7 has a local privilege escalation vulnerability. A local attacker can exploit this vulnerability to gain root privileges. The Huawei P7 is a smartphone from the Chinese company Huawei. An integer overflow vulnerability exists in the Huawei P7 that uses software versions earlier than P7-L07 V100R001C01B606

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-201604-0443",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "p7",
            "scope": "lte",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "p7-l07_v100r001c01b606"
          },
          {
            "model": "p7",
            "scope": null,
            "trust": 0.8,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l07 v100r001c01b606"
          },
          {
            "model": "smart phones",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "huawei",
            "version": "7"
          },
          {
            "model": "p7",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7-l07",
            "scope": "eq",
            "trust": 0.3,
            "vendor": "huawei",
            "version": "0"
          },
          {
            "model": "p7-l07 v100r001c01b606",
            "scope": "ne",
            "trust": 0.3,
            "vendor": "huawei",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          },
          {
            "db": "BID",
            "id": "80286"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8304"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/h:huawei:p7",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/a:huawei:p7_firmware",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          }
        ]
      },
      "credits": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/credits#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Mr. Xiao Peng and Yang Chengming of Alibaba Mobile Security Team.",
        "sources": [
          {
            "db": "BID",
            "id": "80286"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          }
        ],
        "trust": 0.9
      },
      "cve": "CVE-2015-8304",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.3,
                "confidentialityImpact": "COMPLETE",
                "exploitabilityScore": 8.6,
                "id": "CVE-2015-8304",
                "impactScore": 10.0,
                "integrityImpact": "COMPLETE",
                "severity": "HIGH",
                "trust": 1.8,
                "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.2,
                "confidentialityImpact": "COMPLETE",
                "exploitabilityScore": 3.9,
                "id": "CNVD-2016-00345",
                "impactScore": 10.0,
                "integrityImpact": "COMPLETE",
                "severity": "HIGH",
                "trust": 0.6,
                "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "VULHUB",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.3,
                "confidentialityImpact": "COMPLETE",
                "exploitabilityScore": 8.6,
                "id": "VHN-86265",
                "impactScore": 10.0,
                "integrityImpact": "COMPLETE",
                "severity": "HIGH",
                "trust": 0.1,
                "vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "author": "nvd@nist.gov",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "exploitabilityScore": 1.8,
                "id": "CVE-2015-8304",
                "impactScore": 5.9,
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "trust": 1.8,
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2015-8304",
                "trust": 1.0,
                "value": "HIGH"
              },
              {
                "author": "NVD",
                "id": "CVE-2015-8304",
                "trust": 0.8,
                "value": "High"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2016-00345",
                "trust": 0.6,
                "value": "HIGH"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-201601-309",
                "trust": 0.6,
                "value": "CRITICAL"
              },
              {
                "author": "VULHUB",
                "id": "VHN-86265",
                "trust": 0.1,
                "value": "HIGH"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86265"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8304"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Integer overflow in Huawei P7 phones with software before P7-L07 V100R001C01B606 allows remote attackers to gain privileges via a crafted application with the system or camera permission. HuaweiSmartPhones7 is a smart phone from China Huawei. HuaweiSmartPhones7 has a local privilege escalation vulnerability. A local attacker can exploit this vulnerability to gain root privileges. The Huawei P7 is a smartphone from the Chinese company Huawei. An integer overflow vulnerability exists in the Huawei P7 that uses software versions earlier than P7-L07 V100R001C01B606",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2015-8304"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          },
          {
            "db": "BID",
            "id": "80286"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86265"
          }
        ],
        "trust": 2.52
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2015-8304",
            "trust": 3.4
          },
          {
            "db": "BID",
            "id": "80286",
            "trust": 1.0
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045",
            "trust": 0.8
          },
          {
            "db": "CNVD",
            "id": "CNVD-2016-00345",
            "trust": 0.6
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-309",
            "trust": 0.6
          },
          {
            "db": "VULHUB",
            "id": "VHN-86265",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86265"
          },
          {
            "db": "BID",
            "id": "80286"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8304"
          }
        ]
      },
      "id": "VAR-201604-0443",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86265"
          }
        ],
        "trust": 1.47083335
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          }
        ]
      },
      "last_update_date": "2025-04-12T23:32:43.723000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "Huawei-SA-20160104-01-SmartPhone",
            "trust": 0.8,
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-01-smartphone-en"
          },
          {
            "title": "Huawei SmartPhones patch for local privilege escalation vulnerability",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/70282"
          },
          {
            "title": "Huawei P7 Fixes for integer overflow vulnerabilities",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=59632"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "CWE-119",
            "trust": 1.9
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-86265"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8304"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.0,
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-01-smartphone-en"
          },
          {
            "trust": 0.8,
            "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-8304"
          },
          {
            "trust": 0.8,
            "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-8304"
          },
          {
            "trust": 0.6,
            "url": "http://www.huawei.com/cn/psirt/security-advisories/huawei-sa-20160104-01-smartphone-cn"
          },
          {
            "trust": 0.6,
            "url": "http://www.securityfocus.com/bid/80286"
          },
          {
            "trust": 0.3,
            "url": "http://www.huawei.com/"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86265"
          },
          {
            "db": "BID",
            "id": "80286"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8304"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86265"
          },
          {
            "db": "BID",
            "id": "80286"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8304"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2016-01-20T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          },
          {
            "date": "2016-04-13T00:00:00",
            "db": "VULHUB",
            "id": "VHN-86265"
          },
          {
            "date": "2016-01-04T00:00:00",
            "db": "BID",
            "id": "80286"
          },
          {
            "date": "2016-04-18T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          },
          {
            "date": "2016-01-15T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          },
          {
            "date": "2016-04-13T14:59:02.407000",
            "db": "NVD",
            "id": "CVE-2015-8304"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2016-01-20T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2016-00345"
          },
          {
            "date": "2016-09-30T00:00:00",
            "db": "VULHUB",
            "id": "VHN-86265"
          },
          {
            "date": "2016-01-04T00:00:00",
            "db": "BID",
            "id": "80286"
          },
          {
            "date": "2016-04-18T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          },
          {
            "date": "2016-04-14T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          },
          {
            "date": "2025-04-12T10:46:40.837000",
            "db": "NVD",
            "id": "CVE-2015-8304"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "remote",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Huawei P7 Phone software integer overflow vulnerability",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007045"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "buffer overflow",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-309"
          }
        ],
        "trust": 0.6
      }
    }

    VAR-201604-0444

    Vulnerability from variot - Updated: 2025-04-12 23:16

    Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege. HuaweiSmartPhones7 is a smart phone from China Huawei. There is a security hole in HuaweiSmartPhones7. A local attacker could exploit this vulnerability to crash the system. Huawei Sophia-L10 is a smartphone from the Chinese company Huawei. A security vulnerability exists in the Huawei Sophia-L10 that uses software versions earlier than P7-L10C900B852

    Show details on source website

    {
      "@context": {
        "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
        "affected_products": {
          "@id": "https://www.variotdbs.pl/ref/affected_products"
        },
        "configurations": {
          "@id": "https://www.variotdbs.pl/ref/configurations"
        },
        "credits": {
          "@id": "https://www.variotdbs.pl/ref/credits"
        },
        "cvss": {
          "@id": "https://www.variotdbs.pl/ref/cvss/"
        },
        "description": {
          "@id": "https://www.variotdbs.pl/ref/description/"
        },
        "exploit_availability": {
          "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
        },
        "external_ids": {
          "@id": "https://www.variotdbs.pl/ref/external_ids/"
        },
        "iot": {
          "@id": "https://www.variotdbs.pl/ref/iot/"
        },
        "iot_taxonomy": {
          "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
        },
        "patch": {
          "@id": "https://www.variotdbs.pl/ref/patch/"
        },
        "problemtype_data": {
          "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
        },
        "references": {
          "@id": "https://www.variotdbs.pl/ref/references/"
        },
        "sources": {
          "@id": "https://www.variotdbs.pl/ref/sources/"
        },
        "sources_release_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
        },
        "sources_update_date": {
          "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
        },
        "threat_type": {
          "@id": "https://www.variotdbs.pl/ref/threat_type/"
        },
        "title": {
          "@id": "https://www.variotdbs.pl/ref/title/"
        },
        "type": {
          "@id": "https://www.variotdbs.pl/ref/type/"
        }
      },
      "@id": "https://www.variotdbs.pl/vuln/VAR-201604-0444",
      "affected_products": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "model": "p7",
            "scope": "lte",
            "trust": 1.0,
            "vendor": "huawei",
            "version": "p7-l10c900b852"
          },
          {
            "model": "p7-l10",
            "scope": null,
            "trust": 0.8,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "p7-l10",
            "scope": "lt",
            "trust": 0.8,
            "vendor": "huawei",
            "version": "p7-l10c900b852"
          },
          {
            "model": "smart phones",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "huawei",
            "version": "7"
          },
          {
            "model": "p7",
            "scope": "eq",
            "trust": 0.6,
            "vendor": "huawei",
            "version": null
          },
          {
            "model": "sophia-l10",
            "scope": "eq",
            "trust": 0.3,
            "vendor": "huawei",
            "version": "0"
          },
          {
            "model": "sophia-l10 p7-l10c900b852",
            "scope": "ne",
            "trust": 0.3,
            "vendor": "huawei",
            "version": null
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          },
          {
            "db": "BID",
            "id": "80287"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8305"
          }
        ]
      },
      "configurations": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/configurations#",
          "children": {
            "@container": "@list"
          },
          "cpe_match": {
            "@container": "@list"
          },
          "data": {
            "@container": "@list"
          },
          "nodes": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "CVE_data_version": "4.0",
            "nodes": [
              {
                "cpe_match": [
                  {
                    "cpe22Uri": "cpe:/h:huawei:p7-l10",
                    "vulnerable": true
                  },
                  {
                    "cpe22Uri": "cpe:/a:huawei:p7-l10_firmware",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          }
        ]
      },
      "credits": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/credits#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Xiao Peng of Alibaba Mobile Security Team",
        "sources": [
          {
            "db": "BID",
            "id": "80287"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          }
        ],
        "trust": 0.9
      },
      "cve": "CVE-2015-8305",
      "cvss": {
        "@context": {
          "cvssV2": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
          },
          "cvssV3": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
          },
          "severity": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/cvss/severity#"
            },
            "@id": "https://www.variotdbs.pl/ref/cvss/severity"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            },
            "@id": "https://www.variotdbs.pl/ref/sources"
          }
        },
        "data": [
          {
            "cvssV2": [
              {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "nvd@nist.gov",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.1,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 8.6,
                "id": "CVE-2015-8305",
                "impactScore": 6.9,
                "integrityImpact": "NONE",
                "severity": "HIGH",
                "trust": 1.8,
                "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C",
                "version": "2.0"
              },
              {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "author": "CNVD",
                "availabilityImpact": "PARTIAL",
                "baseScore": 2.1,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 3.9,
                "id": "CNVD-2016-00344",
                "impactScore": 2.9,
                "integrityImpact": "NONE",
                "severity": "LOW",
                "trust": 0.6,
                "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
                "version": "2.0"
              },
              {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "author": "VULHUB",
                "availabilityImpact": "COMPLETE",
                "baseScore": 7.1,
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 8.6,
                "id": "VHN-86266",
                "impactScore": 6.9,
                "integrityImpact": "NONE",
                "severity": "HIGH",
                "trust": 0.1,
                "vectorString": "AV:N/AC:M/AU:N/C:N/I:N/A:C",
                "version": "2.0"
              }
            ],
            "cvssV3": [
              {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "author": "nvd@nist.gov",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "exploitabilityScore": 1.8,
                "id": "CVE-2015-8305",
                "impactScore": 3.6,
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "trust": 1.8,
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                "version": "3.0"
              }
            ],
            "severity": [
              {
                "author": "nvd@nist.gov",
                "id": "CVE-2015-8305",
                "trust": 1.0,
                "value": "MEDIUM"
              },
              {
                "author": "NVD",
                "id": "CVE-2015-8305",
                "trust": 0.8,
                "value": "Medium"
              },
              {
                "author": "CNVD",
                "id": "CNVD-2016-00344",
                "trust": 0.6,
                "value": "LOW"
              },
              {
                "author": "CNNVD",
                "id": "CNNVD-201601-308",
                "trust": 0.6,
                "value": "HIGH"
              },
              {
                "author": "VULHUB",
                "id": "VHN-86266",
                "trust": 0.1,
                "value": "HIGH"
              }
            ]
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86266"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8305"
          }
        ]
      },
      "description": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/description#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Huawei Sophia-L10 smartphones with software before P7-L10C900B852 allow attackers to cause a denial of service (system panic) via a crafted application with the system or camera privilege. HuaweiSmartPhones7 is a smart phone from China Huawei. There is a security hole in HuaweiSmartPhones7. A local attacker could exploit this vulnerability to crash the system. Huawei Sophia-L10 is a smartphone from the Chinese company Huawei. A security vulnerability exists in the Huawei Sophia-L10 that uses software versions earlier than P7-L10C900B852",
        "sources": [
          {
            "db": "NVD",
            "id": "CVE-2015-8305"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          },
          {
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          },
          {
            "db": "BID",
            "id": "80287"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86266"
          }
        ],
        "trust": 2.52
      },
      "external_ids": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "db": "NVD",
            "id": "CVE-2015-8305",
            "trust": 3.4
          },
          {
            "db": "BID",
            "id": "80287",
            "trust": 1.6
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046",
            "trust": 0.8
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-308",
            "trust": 0.7
          },
          {
            "db": "CNVD",
            "id": "CNVD-2016-00344",
            "trust": 0.6
          },
          {
            "db": "VULHUB",
            "id": "VHN-86266",
            "trust": 0.1
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86266"
          },
          {
            "db": "BID",
            "id": "80287"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8305"
          }
        ]
      },
      "id": "VAR-201604-0444",
      "iot": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": true,
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86266"
          }
        ],
        "trust": 1.4175925999999999
      },
      "iot_taxonomy": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "category": [
              "Network device"
            ],
            "sub_category": null,
            "trust": 0.6
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          }
        ]
      },
      "last_update_date": "2025-04-12T23:16:41.972000Z",
      "patch": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/patch#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "title": "huawei-sa-20160104-02-smartphone",
            "trust": 0.8,
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-02-smartphone-en"
          },
          {
            "title": "HuaweiSmartPhones denial of service vulnerability patch",
            "trust": 0.6,
            "url": "https://www.cnvd.org.cn/patchInfo/show/70280"
          },
          {
            "title": "Huawei Sophia-L10 Remediation measures for denial of service vulnerabilities",
            "trust": 0.6,
            "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=59631"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          }
        ]
      },
      "problemtype_data": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "problemtype": "CWE-20",
            "trust": 1.9
          }
        ],
        "sources": [
          {
            "db": "VULHUB",
            "id": "VHN-86266"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8305"
          }
        ]
      },
      "references": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/references#",
          "data": {
            "@container": "@list"
          },
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": [
          {
            "trust": 2.0,
            "url": "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-02-smartphone-en"
          },
          {
            "trust": 1.2,
            "url": "http://www.securityfocus.com/bid/80287"
          },
          {
            "trust": 0.8,
            "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-8305"
          },
          {
            "trust": 0.8,
            "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-8305"
          },
          {
            "trust": 0.3,
            "url": "http://www.huawei.com"
          }
        ],
        "sources": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86266"
          },
          {
            "db": "BID",
            "id": "80287"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8305"
          }
        ]
      },
      "sources": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          },
          {
            "db": "VULHUB",
            "id": "VHN-86266"
          },
          {
            "db": "BID",
            "id": "80287"
          },
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          },
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          },
          {
            "db": "NVD",
            "id": "CVE-2015-8305"
          }
        ]
      },
      "sources_release_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2016-01-20T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          },
          {
            "date": "2016-04-07T00:00:00",
            "db": "VULHUB",
            "id": "VHN-86266"
          },
          {
            "date": "2016-01-04T00:00:00",
            "db": "BID",
            "id": "80287"
          },
          {
            "date": "2016-04-18T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          },
          {
            "date": "2016-01-15T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          },
          {
            "date": "2016-04-07T19:59:00.110000",
            "db": "NVD",
            "id": "CVE-2015-8305"
          }
        ]
      },
      "sources_update_date": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
          "data": {
            "@container": "@list"
          }
        },
        "data": [
          {
            "date": "2016-01-20T00:00:00",
            "db": "CNVD",
            "id": "CNVD-2016-00344"
          },
          {
            "date": "2016-04-14T00:00:00",
            "db": "VULHUB",
            "id": "VHN-86266"
          },
          {
            "date": "2016-01-04T00:00:00",
            "db": "BID",
            "id": "80287"
          },
          {
            "date": "2016-04-18T00:00:00",
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          },
          {
            "date": "2016-04-08T00:00:00",
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          },
          {
            "date": "2025-04-12T10:46:40.837000",
            "db": "NVD",
            "id": "CVE-2015-8305"
          }
        ]
      },
      "threat_type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "remote",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          }
        ],
        "trust": 0.6
      },
      "title": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/title#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "Huawei Sophia-L10 Service disruption in smartphone software  (DoS) Vulnerabilities",
        "sources": [
          {
            "db": "JVNDB",
            "id": "JVNDB-2015-007046"
          }
        ],
        "trust": 0.8
      },
      "type": {
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/type#",
          "sources": {
            "@container": "@list",
            "@context": {
              "@vocab": "https://www.variotdbs.pl/ref/sources#"
            }
          }
        },
        "data": "input validation",
        "sources": [
          {
            "db": "CNNVD",
            "id": "CNNVD-201601-308"
          }
        ],
        "trust": 0.6
      }
    }