CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 9.3
CWE Name:  Improper Access Control
Summary: the ovisp driver in huawei p8 smartphones with software gra-tl00 before gra-tl00c01b230, gra-cl00 before gra-cl00c92b230, gra-cl10 before gra-cl10c92b230, gra-ul00 before gra-ul00c00b230, and gra-ul10 before gra-ul10c00b230, and mate s smartphones with software crr-tl00 before crr-tl00c01b160sp01, crr-ul00 before crr-ul00c00b160, and crr-cl00 before crr-cl00c92b161 allows attackers to cause a denial of service (system crash) or gain privileges via a crafted application with the camera permission, aka an "interface access control vulnerability."
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2016-04-07
Last Modified Date: 2016-04-11