CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2015-8682
https://notcve.org/view.php?id=CVE-2015-8682
The Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA-UL10 before GRA-UL10C00B350, GRA-TL00 before GRA-TL00C01B350, GRA-CL00 before GRA-CL00C92B350, and GRA-CL10 before GRA-CL10C92B350 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to obtain sensitive information from stack memory or cause a denial of service (system crash) via a crafted application, which triggers an invalid memory access. El controlador Video0 en smartphones Huawei P8 con software GRA-UL00 en versiones anteriores a GRA-UL00C00B350, GRA-UL10 en versiones anteriores a GRA-UL10C00B350, GRA-TL00 en versiones anteriores a GRA-TL00C01B350, GRA-CL00 en versiones anteriores a GRA-CL00C92B350 y GRA-CL10 en versiones anteriores a GRA-CL10C92B350 y smartphones Mate S con software CRR-TL00 en versiones anteriores a CRR-TL00C01B160SP01, CRR-UL00 en versiones anteriores a CRR-UL00C00B160 y CRR-CL00 en versiones anteriores a CRR-CL00C92B161 permite a atacantes obtener información sensible de la memoria de pila o provocar una denegación de servicio (caída de sistema) a través de una aplicación manipulada, lo que desencadena un acceso de memoria no válido. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160130-01-smartphone-en • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 4EXPL: 0CVE-2016-1495
https://notcve.org/view.php?id=CVE-2016-1495
Integer overflow in the graphics drivers in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application, which triggers a heap-based buffer overflow. Desbordamiento de entero en controladores graphics en smartphones Huawei Mate S con software CRR-TL00 en versiones anteriores a CRR-TL00C01B160SP01, CRR-UL00 en versiones anteriores a CRR-UL00C00B160 y CRR-CL00 en versiones anteriores a CRR-CL00C92B161 permite a atacantes provocar una denegación de servicio (caída de sistema) u obtener privilegios a través de una aplicación manipulada, lo que desencadena un desbordamiento de buffer basado en memoria dinámica. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160203-01-smartphone-en • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •