CVE-2015-8682

CWE-20 — Improper Input Validation3 documents3 sources
Severity
6.1MEDIUM
EPSS
0.1%
top 78.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Mate S FirmwareHuawei P8 Firmware
Timeline
PublishedApr 13
Latest updateMay 17

Description

The Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA-UL10 before GRA-UL10C00B350, GRA-TL00 before GRA-TL00C01B350, GRA-CL00 before GRA-CL00C92B350, and GRA-CL10 before GRA-CL10C92B350 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to obtain sensitive information from stack memory or cause a denial of service (system crash) via a crafted applica…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:HExploitability: 1.8 | Impact: 4.2

Affected Packages2 packages

▶NVDhuawei/mate_s_firmwarecrr-cl00c92b153+2
▶NVDhuawei/p8_firmwaregra-cl00c92b230+4

🔴Vulnerability Details

2
GHSA
GHSA-gf9m-fv4f-59cp: The Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA-UL10 before GRA-UL10C00B350, GRA-TL00 before GRA-TL00C01↗2022-05-17
▶
CVEList
CVE-2015-8682: The Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA-UL10 before GRA-UL10C00B350, GRA-TL00 before GRA-TL00C01↗2016-04-13
▶
CVE-2015-8682 (MEDIUM CVSS 6.1) | The Video0 driver in Huawei P8 smar | cvebase.io