CVSS: 6.4EPSS: 0%CPEs: 6EXPL: 0CVE-2016-8764
https://notcve.org/view.php?id=CVE-2016-8764
The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and write user-mode memory data anywhere in the TrustZone driver. El controlador TrustZone en teléfonos Huawei P9 con versiones de software anteriores a EVA-AL10C00B352 y P9 Lite con software VNS-L21C185B130 y versiones anteriores y P8 Lite con software ALE-L02C636B150 y versiones anteriores tiene una vulnerabilidad de validación de entrada, lo que permite a atacantes leer y escribir datos de memoria en modo usuario en cualquier lugar en el controlador TrustZone. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en http://www.securityfocus.com/bid/94509 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 6EXPL: 0CVE-2016-8763
https://notcve.org/view.php?id=CVE-2016-8763
The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to cause a system restart or privilege elevation. El controlador TrustZone en teléfonos Huawei P9 con versiones de software anteriores a EVA-AL10C00B352 y P9 Lite con software VNS-L21C185B130 y versiones anteriores y P8 Lite con software ALE-L02C636B150 y versiones anteriores tiene una vulnerabilidad de liberación de recursos inadecuada, lo que permite a atacantes provocar un reinicio del sistema o elevación de privilegios. • http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161123-01-smartphone-en http://www.securityfocus.com/bid/94509 • CWE-664: Improper Control of a Resource Through its Lifetime •