CVE-2016-8763

CWE-6643 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 82.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei P8 Lite FirmwareHuawei P9 Lite Firmware
Timeline
PublishedApr 2
Latest updateMay 17

Description

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to cause a system restart or privilege elevation.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDhuawei/p8_lite_firmwareale-l02c636b150
▶NVDhuawei/p9_lite_firmwarevns-l21c185b130

🔴Vulnerability Details

2
GHSA
GHSA-7868-9j9h-fr97: The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier ver↗2022-05-17
▶
CVEList
CVE-2016-8763: The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier ver↗2017-04-02
▶
CVE-2016-8763 (HIGH CVSS 7.8) | The TrustZone driver in Huawei P9 p | cvebase.io