Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-8657 State: PUBLISHED Published: 2016-03-04T23:00:00 Last Updated: 2024-08-06T08:20:43.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-20
15-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8658, and CVE-2015-8820. Additional Analyst Notes: - CVE Program Container: References: - https://helpx.adobe.com/security/products/flash-player/apsb15-32.html - http://www.securityfocus.com/bid/84160 - http://www.zerodayinitiative.com/advisories/ZDI-15-660
CVE ID: CVE-2015-8658 State: PUBLISHED Published: 2016-03-04T23:00:00 Last Updated: 2024-08-06T08:20:43.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before 20.0.0.204 allow attackers to execute arbitrary code or cause a denial of service (uninitialized pointer dereference and memory corruption) via crafted MPEG-4 data, a different vulnerability than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-20
ity than CVE-2015-8045, CVE-2015-8047, CVE-2015-8060, CVE-2015-8408, CVE-2015-8416, CVE-2015-8417, CVE-2015-8418, CVE-2015-8419, CVE-2015-8443, CVE-2015-8444, CVE-2015-8451, CVE-2015-8455, CVE-2015-8652, CVE-2015-8654, CVE-2015-8656, CVE-2015-8657, and CVE-2015-8820. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-662 - https://helpx.adobe.com/security/products/flash-player/apsb15-32.html - http://www.securityfocus.com/bid/84160
CVE ID: CVE-2015-8659 State: PUBLISHED Published: 2016-01-12T19:00:00 Last Updated: 2024-08-06T08:20:43.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a heap-use-after-free bug. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html - https://security.gentoo.org/glsa/201612-06 - https://support.apple.com/HT206167 - https://support.apple.com/HT206168 - http://www.openwall.com/lists/oss-security/2015/12/23/10 - http://www.securitytracker.com/id/1035353 - http://www.openwall.com/l
ww.openwall.com/lists/oss-security/2015/12/23/10 - http://www.securitytracker.com/id/1035353 - http://www.openwall.com/lists/oss-security/2015/12/23/6 - http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175085.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html - https://nghttp2.org/blog/2015/12/23/nghttp2-v1-6-0/ - http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175423.html - http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html - https://support.apple.com/HT206169 - https://support.apple.com/HT206166
CVE ID: CVE-2015-8660 State: PUBLISHED Published: 2015-12-28T11:00:00 Last Updated: 2024-08-06T08:20:43.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allows local users to bypass intended access restrictions and modify the attributes of arbitrary overlay files via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - https://www.exploit-db.com/exploits/39166/ - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg
546.html - https://www.exploit-db.com/exploits/39166/ - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00039.html - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00043.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://packetstormsecurity.com/files/135151/Ubuntu-14.04-LTS-15.10-overlayfs-Local-Root.html - http://www.securitytracker.com/id/1034548 - http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=acff81ec2c79492b180fade3c2894425cd35a545 - http://rhn.redhat.com/errata/RHSA-2016-1541.html - https://github.com/torvalds/linux/commit/acff81ec2c79492b180fade3c2894425cd35a545 - https://www.e
/RHSA-2016-1541.html - https://github.com/torvalds/linux/commit/acff81ec2c79492b180fade3c2894425cd35a545 - https://www.exploit-db.com/exploits/40688/ - http://www.openwall.com/lists/oss-security/2015/12/23/5 - http://rhn.redhat.com/errata/RHSA-2016-1539.html - http://www.ubuntu.com/usn/USN-2857-2 - http://rhn.redhat.com/errata/RHSA-2016-1532.html - https://bugzilla.redhat.com/show_bug.cgi?id=1291329 - https://www.exploit-db.com/exploits/39230/ - http://www.ubuntu.com/usn/USN-2858-2 - http://www.ubuntu.com/usn/USN-2858-3 - http://www.ubuntu.com/usn/USN-2858-1 - http://www.ubuntu.com/usn/USN-2857-1 - http://www.securityfocus.com/bid/79671 - http://lists.opensuse.org/opensuse-security-announce/
untu.com/usn/USN-2857-1 - http://www.securityfocus.com/bid/79671 - http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00040.html
CVE ID: CVE-2015-8661 State: PUBLISHED Published: 2015-12-24T01:00:00 Last Updated: 2024-08-06T08:20:43.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: The h264_slice_header_init function in libavcodec/h264_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number of threads and the number of slices, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted H.264 data. Additional Analyst Notes: - CVE Program Container: References: - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=4ea4d2f438c9a7eba37980c9a87be4b34943e4d5 - http://www.securitytracker.com/id/103453
lan.org/?p=ffmpeg.git%3Ba=commit%3Bh=4ea4d2f438c9a7eba37980c9a87be4b34943e4d5 - http://www.securitytracker.com/id/1034539 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html
CVE ID: CVE-2015-8662 State: PUBLISHED Published: 2015-12-24T01:00:00 Last Updated: 2024-08-06T08:20:43.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_dwt_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before proceeding with Discrete Wavelet Transform decoding, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JPEG 2000 data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034539 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http:
- http://www.securitytracker.com/id/1034539 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=75422280fbcdfbe9dc56bde5525b4d8b280f1bc5
CVE ID: CVE-2015-8663 State: PUBLISHED Published: 2015-12-24T01:00:00 Last Updated: 2024-08-06T08:20:43.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ff_get_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failure, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted .mov file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1034539 - https://lists.debian.org/debian-lts-announce/2018/12/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html -
debian-lts-announce/2018/12/msg00009.html - http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00004.html - http://git.videolan.org/?p=ffmpeg.git%3Ba=commit%3Bh=abee0a1c60612e8638640a8a3738fffb65e16dbf
CVE ID: CVE-2015-8664 State: PUBLISHED Published: 2015-12-24T02:00:00 Last Updated: 2024-08-06T08:20:43.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.html - http://www.securitytracker.com/id/1034491 - https://code.google
ses.blogspot.com/2015/12/stable-channel-update_15.html - http://www.securitytracker.com/id/1034491 - https://code.google.com/p/chromium/issues/detail?id=569486 - https://code.google.com/p/chromium/issues/detail?id=565023 - https://codereview.chromium.org/1498903003 - http://www.ubuntu.com/usn/USN-2860-1 - http://www.securityfocus.com/bid/79686
CVE ID: CVE-2015-8665 State: PUBLISHED Published: 2016-04-13T17:00:00 Last Updated: 2024-08-06T08:20:43.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1035508 - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.ubuntu.com/usn/USN-2939-1 - http://www.o
.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - http://www.ubuntu.com/usn/USN-2939-1 - http://www.openwall.com/lists/oss-security/2015/12/24/4 - https://security.gentoo.org/glsa/201701-16 - http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html - http://www.openwall.com/lists/oss-security/2015/12/24/2 - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://www.debian.org/security/2016/dsa-3467 - http://www.securityfocus.com/bid/79728
CVE ID: CVE-2015-8666 State: PUBLISHED Published: 2017-04-11T19:00:00 Last Updated: 2024-08-06T08:29:20.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator. Additional Analyst Notes: - CVE Program Container: References: - http://www.openwall.com/lists/oss-security/2015/12/24/1 - https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html - https://bugzilla.redhat.com/show_bug.cgi?id=1283722 - http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=d9a3b33d2c9f996537b7f1d0246dee2d0120cefb - http://www.securityfocus.com/bid/79670 - https://security.gentoo.org/glsa/201602-01
CVE ID: CVE-2015-8667 State: PUBLISHED Published: 2017-01-18T17:00:00 Last Updated: 2024-08-06T08:29:20.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email. Additional Analyst Notes: - CVE Program Container: References: - https://exponentcms.lighthouseapp.com/projects/61783/tickets/1320-exponent-cms-235-cross-site-scripting-vulnerability - https://packetstormsecurity.com/files/136763/Exponent-CMS-2.3.5-Cross-Site-Scripting.html
CVE ID: CVE-2015-8668 State: PUBLISHED Published: 2016-01-08T19:00:00 Last Updated: 2024-08-06T08:29:20.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image. Additional Analyst Notes: - CVE Program Container: References: - http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html - http://rhn.redhat.com/errata/RHSA-2016-1547.html - http://packetstormsecurity.com/files/135080/libtiff-4.0.6-Heap-Overflow.html - http://www.ora
rata/RHSA-2016-1547.html - http://packetstormsecurity.com/files/135080/libtiff-4.0.6-Heap-Overflow.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html - https://security.gentoo.org/glsa/201701-16 - http://rhn.redhat.com/errata/RHSA-2016-1546.html - http://www.securityfocus.com/archive/1/537208/100/0/threaded
CVE ID: CVE-2015-8669 State: PUBLISHED Published: 2015-12-26T22:00:00 Last Updated: 2024-08-06T08:29:20.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: libraries/config/messages.inc.php in phpMyAdmin 4.0.x before 4.0.10.12, 4.4.x before 4.4.15.2, and 4.5.x before 4.5.3.1 allows remote attackers to obtain sensitive information via a crafted request, which reveals the full path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-updates/2016-01/msg00014.html - https://www.phpmyadmin.net/security/PMASA-2015-6/ - http://www.securitytracker.com/id/1034806 - https://github.com/phpmyadmin/phpmyadmin/commit/c4d64932
ity/PMASA-2015-6/ - http://www.securitytracker.com/id/1034806 - https://github.com/phpmyadmin/phpmyadmin/commit/c4d649325b25139d7c097e56e2e46cc7187fae45
CVE ID: CVE-2015-8670 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T08:29:20.186Z Vendors: n/a Products: LogCenter V100R001C10 Problem Types: DoS Description: Huawei LogCenter V100R001C10 could allow an authenticated attacker to add abnormal device information to the log collection module, causing denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-464247
CVE ID: CVE-2015-8671 State: PUBLISHED Published: 2017-04-02T20:00:00 Last Updated: 2024-08-06T08:29:20.679Z Vendors: n/a Products: LogCenter V100R001C10 Problem Types: Privilege Escalation Description: Huawei LogCenter V100R001C10 could allow an authenticated attacker to tamper with requests using a tool and submit a request to the server for privilege escalation, affecting some system functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-464243
CVE ID: CVE-2015-8672 State: PUBLISHED Published: 2016-01-12T20:00:00 Last Updated: 2024-08-06T08:29:20.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 allows remote attackers to cause a denial of service (wired presentation outage) via unspecified vectors involving a wireless presentation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-462952
CVE ID: CVE-2015-8673 State: PUBLISHED Published: 2016-01-12T20:00:00 Last Updated: 2024-08-06T08:29:20.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not require entry of the old password when changing the password for the Debug account, which allows physically proximate attackers to change the password by leveraging an unattended workstation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/hw-462952
CVE ID: CVE-2015-8674 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2015-8675 State: PUBLISHED Published: 2016-01-15T19:00:00 Last Updated: 2024-08-06T08:29:20.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei S5300 Campus Series switches with software before V200R005SPH008 do not mask the password when uploading files, which allows physically proximate attackers to obtain sensitive password information by reading the display. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160112-01-switch-en
CVE ID: CVE-2015-8676 State: PUBLISHED Published: 2016-04-14T15:00:00 Last Updated: 2024-08-06T08:29:20.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200R001C00 before V200R001SPH018, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; S9300, S7700, and S9700 Campus series switches with software V200R001C00 before V200R001SPH023, V200R002C00 before V200R003SPH011, and V200R003C00 before V200R003SPH011; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote attackers to cause a denial of s
00 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote attackers to cause a denial of service (memory consumption and reboot) via a large number of ICMPv6 packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-02-switch-en
CVE ID: CVE-2015-8677 State: PUBLISHED Published: 2016-04-14T15:00:00 Last Updated: 2024-08-06T08:29:20.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V200R003SPH011 and V200R005C00 before V200R005SPH008; S2350EI and S5300LI Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH008, and V200R006C00 before V200R006SPH002; S9300, S7700, and S9700 Campus series switches with software V200R003C00 before V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campu
fore V200R003SPH011, V200R005C00 before V200R005SPH009, and V200R006C00 before V200R006SPH003; S5720HI and S5720EI Campus series switches with software V200R006C00 before V200R006SPH002; and S2300 and S3300 Campus series switches with software V100R006C05 before V100R006SPH022 allows remote authenticated users to cause a denial of service (memory consumption and device restart) by logging in and out of the (1) HTTPS or (2) SFTP server, related to SSL session information. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160113-03-switch-en
CVE ID: CVE-2015-8678 State: PUBLISHED Published: 2017-03-24T14:00:00 Last Updated: 2024-08-06T08:29:20.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows remote attackers to cause a denial of service (crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.hua
rvice (crash) via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160105-01-smartphone-en
CVE ID: CVE-2015-8679 State: PUBLISHED Published: 2016-04-07T20:00:00 Last Updated: 2024-08-06T08:29:20.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Maxim_smartpa_dev driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allow attackers to cause a denial of service (system crash) via a crafted application, which triggers an invalid memory access. Additional Analyst Notes:
of service (system crash) via a crafted application, which triggers an invalid memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160105-01-smartphone-en
CVE ID: CVE-2015-8680 State: PUBLISHED Published: 2016-04-07T20:00:00 Last Updated: 2024-08-06T08:29:21.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Graphics driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application with the graphics permission, aka an "interface access
vice (system crash) or gain privileges via a crafted application with the graphics permission, aka an "interface access control vulnerability," a different vulnerability than CVE-2015-8307. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en
CVE ID: CVE-2015-8681 State: PUBLISHED Published: 2016-04-07T20:00:00 Last Updated: 2024-08-06T08:29:21.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ovisp driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL00C92B230, GRA-CL10 before GRA-CL10C92B230, GRA-UL00 before GRA-UL00C00B230, and GRA-UL10 before GRA-UL10C00B230, and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application with the camera permission, aka an "interface access contr
e (system crash) or gain privileges via a crafted application with the camera permission, aka an "interface access control vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160104-04-smartphone-en
CVE ID: CVE-2015-8682 State: PUBLISHED Published: 2016-04-13T14:00:00 Last Updated: 2024-08-06T08:29:21.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Video0 driver in Huawei P8 smartphones with software GRA-UL00 before GRA-UL00C00B350, GRA-UL10 before GRA-UL10C00B350, GRA-TL00 before GRA-TL00C01B350, GRA-CL00 before GRA-CL00C92B350, and GRA-CL10 before GRA-CL10C92B350 and Mate S smartphones with software CRR-TL00 before CRR-TL00C01B160SP01, CRR-UL00 before CRR-UL00C00B160, and CRR-CL00 before CRR-CL00C92B161 allows attackers to obtain sensitive information from stack memory or cause a denial of service (system crash) via a crafted application, which triggers an invalid