Huawei P9 Lite Firmware vulnerabilities
7 known vulnerabilities affecting huawei/p9_lite_firmware.
Total CVEs
7
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH2MEDIUM5
Vulnerabilities
Page 1 of 1
CVE-2017-17313MEDIUMCVSS 5.5fixed in vns-l31c02b341fixed in vns-l21c22b380+2 more2018-04-19
CVE-2017-17313 [MEDIUM] CWE-119 CVE-2017-17313: The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versi
The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user
nvd
CVE-2017-2697HIGHCVSS 7.8≤ vns-l21c185b1422017-11-22
CVE-2017-2697 [HIGH] CWE-119 CVE-2017-2697: The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NE
The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and earlier versions,VNS-L21C185B142 and earlier versions,CAM-L21C10B130 and earlier versions,CAM-L21C185B141 and earlier versions has buffer overflow vulnerability. An attacker with the root privilege o
nvd
CVE-2017-8143MEDIUMCVSS 5.5fixed in vns-l21c10b3812017-11-22
CVE-2017-8143 [MEDIUM] CWE-20 CVE-2017-8143: Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21
Wi-Fi driver of Honor 5C and P9 Lite Huawei smart phones with software versions earlier than NEM-L21C432B351 and versions earlier than VNS-L21C10B381 has a DoS vulnerability. An attacker may trick a user into installing a malicious application and the application can access invalid address of driver to crash the system.
nvd
CVE-2016-8763HIGHCVSS 7.8≤ vns-l21c185b1302017-04-02
CVE-2016-8763 [HIGH] CWE-664 CVE-2016-8763: The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9
The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to cause a system restart or privilege elevation.
nvd
CVE-2016-8776MEDIUMCVSS 4.6vvns-l21c1852017-04-02
CVE-2016-8776 [MEDIUM] CWE-285 CVE-2016-8776: Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones wi
Huawei P9 phones with software EVA-AL10C00,EVA-CL10C00,EVA-DL10C00,EVA-TL10C00 and P9 Lite phones with software VNS-L21C185 allow attackers to bypass the factory reset protection (FRP) to enter some functional modules without authorization and perform operations to update the Google account.
nvd
CVE-2016-8762MEDIUMCVSS 5.0≤ vns-l21c185b1302017-04-02
CVE-2016-8762 [MEDIUM] CWE-20 CVE-2016-8762: The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9
The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to cause the system to restart.
nvd
CVE-2016-8764MEDIUMCVSS 6.4≤ vns-l21c185b1302017-04-02
CVE-2016-8764 [MEDIUM] CWE-20 CVE-2016-8764: The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9
The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and write user-mode memory data anywhere in the TrustZone driver.
nvd