VULNERABILITY INTELLIGENCE

CVE-2016-8764

CVSS score6.4 MEDIUM

EPSS probability0.21%

CISA KEVNot currently listed

Published2017-04-02

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an input validation vulnerability, which allows attackers to read and write user-mode memory data anywhere in the TrustZone driver.

Weakness classification

CWE-20: Improper Input Validation

Primary references

psirt@huawei.com — Vendor Advisory
psirt@huawei.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry