VAR-201601-0395

Vulnerability from variot - Updated: 2025-04-13 23:37

Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application. Huawei Mate7 is a smartphone product from China's Huawei company. There is a memory heap overflow vulnerability in Huawei Mate7's HIFI driver. An attacker can use this vulnerability to entice a user to install a malicious application to read and modify memory data, causing the system to reboot or gain root access to the phone. Huawei Smart Phones are prone to a local heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Local attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions. The Huawei Mate 7 and P8 are smartphones from the Chinese company Huawei. HIFI driver is one of the HIFI (High Fidelity) audio drivers. The following products and versions are affected: Huawei Mate 7 using software versions earlier than MT7-UL00C17B354, MT7-TL10C00B354, MT7-TL00C01B354, and MT7-CL00C92B354, using versions earlier than GRA-TL00C01B220SP01, versions earlier than GRA-CL00C92B220, Versions earlier than GRA-CL10C92B220, versions earlier than GRA-UL00C00B220, and P8 of software versions earlier than GRA-UL10C00B220

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201601-0395",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "p8",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "gra-tl00"
      },
      {
        "model": "p8",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "gra-ul10"
      },
      {
        "model": "p8",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "gra-ul100"
      },
      {
        "model": "mate 7",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "mt7-tl00"
      },
      {
        "model": "mate 7",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "mt7-cl00"
      },
      {
        "model": "p8",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "gra-cl100"
      },
      {
        "model": "mate 7",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "mt7-ul00"
      },
      {
        "model": "p8",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "gra-cl10"
      },
      {
        "model": "mate 7",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "huawei",
        "version": "mt7-tl10"
      },
      {
        "model": "mate 7",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "mt7-cl00c92b354"
      },
      {
        "model": "p8",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "gra-cl10"
      },
      {
        "model": "mate 7",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "mt7-tl10"
      },
      {
        "model": "p8",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "gra-tl00c01b220sp01"
      },
      {
        "model": "p8",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "gra-cl00"
      },
      {
        "model": "mate 7",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "mt7-tl00"
      },
      {
        "model": "p8",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "gra-ul00c00b220"
      },
      {
        "model": "mate 7",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "mt7-ul00"
      },
      {
        "model": "p8",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "gra-tl00"
      },
      {
        "model": "mate 7",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "mt7-tl10c00b354"
      },
      {
        "model": "mate 7",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "mt7-cl00"
      },
      {
        "model": "p8",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "gra-cl00c92b220"
      },
      {
        "model": "p8",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "gra-ul00"
      },
      {
        "model": "mate 7",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "mate 7",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "mt7-ul00c17b354"
      },
      {
        "model": "p8",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "gra-ul10c00b220"
      },
      {
        "model": "p8",
        "scope": null,
        "trust": 0.8,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "p8",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "gra-ul10"
      },
      {
        "model": "p8",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "gra-cl10c92b220"
      },
      {
        "model": "mate 7",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "huawei",
        "version": "mt7-tl00c01b354"
      },
      {
        "model": "mate7 \u003cmt7-ul00c17b354",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "mate7 \u003cmt7-tl10c00b354",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "mate7 \u003cmt7-tl00c01b354",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      },
      {
        "model": "mate7 \u003cmt7-cl00c92b354",
        "scope": null,
        "trust": 0.6,
        "vendor": "huawei",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-8088"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/h:huawei:mate_7",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:mate_7_firmware",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:huawei:p8",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/o:huawei:p8_firmware",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Venus Star Active Defense Laboratory (ADLAB)",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2015-8088",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2015-8088",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "HIGH",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "CNVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.6,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 4.9,
            "id": "CNVD-2015-07464",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.6,
            "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "VHN-86049",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "author": "nvd@nist.gov",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 1.8,
            "id": "CVE-2015-8088",
            "impactScore": 5.9,
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 1.0,
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        ],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2015-8088",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2015-8088",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNVD",
            "id": "CNVD-2015-07464",
            "trust": 0.6,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201511-099",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-86049",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      },
      {
        "db": "VULHUB",
        "id": "VHN-86049"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-8088"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application. Huawei Mate7 is a smartphone product from China\u0027s Huawei company. There is a memory heap overflow vulnerability in Huawei Mate7\u0027s HIFI driver. An attacker can use this vulnerability to entice a user to install a malicious application to read and modify memory data, causing the system to reboot or gain root access to the phone. Huawei Smart Phones are prone to a local heap-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. \nLocal attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions. The Huawei Mate 7 and P8 are smartphones from the Chinese company Huawei. HIFI driver is one of the HIFI (High Fidelity) audio drivers. The following products and versions are affected: Huawei Mate 7 using software versions earlier than MT7-UL00C17B354, MT7-TL10C00B354, MT7-TL00C01B354, and MT7-CL00C92B354, using versions earlier than GRA-TL00C01B220SP01, versions earlier than GRA-CL00C92B220, Versions earlier than GRA-CL10C92B220, versions earlier than GRA-UL00C00B220, and P8 of software versions earlier than GRA-UL10C00B220",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-8088"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      },
      {
        "db": "BID",
        "id": "77560"
      },
      {
        "db": "VULHUB",
        "id": "VHN-86049"
      }
    ],
    "trust": 2.52
  },
  "exploit_availability": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-86049",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-86049"
      }
    ]
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2015-8088",
        "trust": 3.4
      },
      {
        "db": "BID",
        "id": "77560",
        "trust": 1.4
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201511-099",
        "trust": 0.7
      },
      {
        "db": "CNVD",
        "id": "CNVD-2015-07464",
        "trust": 0.6
      },
      {
        "db": "EXPLOIT-DB",
        "id": "44306",
        "trust": 0.1
      },
      {
        "db": "SEEBUG",
        "id": "SSVID-89773",
        "trust": 0.1
      },
      {
        "db": "VULHUB",
        "id": "VHN-86049",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      },
      {
        "db": "VULHUB",
        "id": "VHN-86049"
      },
      {
        "db": "BID",
        "id": "77560"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-8088"
      }
    ]
  },
  "id": "VAR-201601-0395",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      },
      {
        "db": "VULHUB",
        "id": "VHN-86049"
      }
    ],
    "trust": 1.4476282533333333
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      }
    ]
  },
  "last_update_date": "2025-04-13T23:37:30.491000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Huawei-SA-20151104-01-HIFI",
        "trust": 0.8,
        "url": "http://www.huawei.com/en/psirt/security-advisories/hw-460347"
      },
      {
        "title": "Huawei Mate7 HIFI Driver Memory Heap Overflow Vulnerability Patch",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchInfo/show/66574"
      },
      {
        "title": "Huawei Mate7  and P8 HIFI Driver fix for heap-based buffer overflow vulnerability",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=58595"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-119",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-86049"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-8088"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.1,
        "url": "http://www.securityfocus.com/bid/77560"
      },
      {
        "trust": 1.1,
        "url": "http://www.huawei.com/en/psirt/security-advisories/hw-460347"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-8088"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-8088"
      },
      {
        "trust": 0.6,
        "url": "http://www1.huawei.com/cn/security/psirt/security-bulletins/security-advisories/hw-460348.htm"
      },
      {
        "trust": 0.6,
        "url": "http://www1.huawei.com/cn/security/psirt/security-bulletins/security-notices/hw-460364.htm?from=singlemessage\u0026isappinstalled=0"
      },
      {
        "trust": 0.6,
        "url": "http://www.huawei.com/cn/security/psirt/security-bulletins/security-advisories/hw-460348.htm"
      },
      {
        "trust": 0.6,
        "url": "http://www.huawei.com/cn/security/psirt/security-bulletins/security-notices/hw-460364.htm?from=singlemessage\u0026isappinstalled=0"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      },
      {
        "db": "VULHUB",
        "id": "VHN-86049"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-8088"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      },
      {
        "db": "VULHUB",
        "id": "VHN-86049"
      },
      {
        "db": "BID",
        "id": "77560"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-8088"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2015-11-12T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      },
      {
        "date": "2016-01-12T00:00:00",
        "db": "VULHUB",
        "id": "VHN-86049"
      },
      {
        "date": "2015-11-04T00:00:00",
        "db": "BID",
        "id": "77560"
      },
      {
        "date": "2016-01-18T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      },
      {
        "date": "2015-11-09T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      },
      {
        "date": "2016-01-12T19:59:07.097000",
        "db": "NVD",
        "id": "CVE-2015-8088"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2015-11-12T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2015-07464"
      },
      {
        "date": "2016-11-28T00:00:00",
        "db": "VULHUB",
        "id": "VHN-86049"
      },
      {
        "date": "2016-07-06T12:13:00",
        "db": "BID",
        "id": "77560"
      },
      {
        "date": "2016-01-18T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      },
      {
        "date": "2016-01-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      },
      {
        "date": "2025-04-12T10:46:40.837000",
        "db": "NVD",
        "id": "CVE-2015-8088"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Huawei Mate 7 and  P8 Phone software  HIFI Driver heap-based buffer overflow vulnerability",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-006776"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "buffer overflow",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201511-099"
      }
    ],
    "trust": 0.6
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…