CVE-2015-8088 - CVE House

Back to Database

Status published High CVE-2015-8088

Heap-based buffer overflow in the HIFI driver in Huawei Mate...

7.8 CVSS

Vulnerability Description

Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-8088

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from huawei

View All →

Input verification vulnerability in the system service module Impact: Successful exploitation...

There is a release of invalid pointer vulnerability in some...

There is an information exposure vulnerability on several Huawei Products....

Huawei AppGallery versions before 8.0.4.301 has an arbitrary Javascript running...

The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier...

Affected Vendor

huawei

View all reports →

Affected Software

p8 firmware, mate 7 firmware

Vulnerable Versions:

gra-cl10, gra-cl100, gra-tl00, gra-ul10, gra-ul100, mt7-cl00, mt7-tl00, mt7-tl10, mt7-ul00

Timeline

Official Publish: January 12th, 2016

Last Modified: August 6th, 2024

Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.