This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our private policy>

Security Advisory - Local Permission Escalation Vulnerability in GPU of P7 Phones

  • SA No:Huawei-SA-20151103-01-GPU
  • Initial Release Date: 2015-11-03
  • Last Release Date: 2015-11-10

The graphics processing unit (GPU) of Huawei P7 phones have a local permission escalation vulnerability.GPU does not properly validate the specific input parameters. An attacker may trick a user into installing a malicious application and use the application to read and modify product memory address, which can crash the system or cause permission escalation. (Vulnerability ID: HWPSIRT-2015-09018)

This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-8089.

Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460276.htm

 

Product Name

Affected Version

Resolved Product and Version

P7

Versions earlier than P7-L00C17B851

P7-L00C17B851

Versions earlier than P7-L05C00B851

P7-L05C00B851

Versions earlier than P7-L09C92B851

P7-L09C92B851

An attacker may exploit this vulnerability to crash the system or cause permission escalation.

The vulnerability classification has been performed by using the CVSSv2 scoring system (http://www.first.org/cvss/).

Base Score: 6.2 (AV:L/AC:H/Au:N/C:C/I:C/A:C)

Temporal Score: 5.1 (E:F/RL:OF/RC:C)

1. Prerequisite:

The attacker successfully tricks a user into installing a malicious application on the device.

2. Attacking procedure:

The attacker tricks a user into installing a malicious application on the device. The malicious application can access specific GPU driver interfaces of the products by system calls. The GPU driver does not properly validate the specific address input by the application. Therefore, the attacker can exploit this application to read and modify product kernel memory address, which can crash the system or cause permission escalation.

Customers should contact Huawei TAC (Huawei Technical Assistance Center) to request the upgrades. For TAC contact information, please refer to Huawei worldwide website at http://www.huawei.com/en/security/psirt/report-vulnerabilities/index.htm.


This vulnerability was reported by Hang Zhang/ Dongdong She/Zhiyun Qian from University of California, Riverside and by Yanfeng Wang/Chiachih Wu/ Xuxian Jiang of C0RE Team from Qihoo 360. Huawei PSIRT is not aware of malicious use of the vulnerability described in this advisory.

Huawei express our appreciation for their concerns on Huawei products.

For security problems about Huawei products and solutions, please contactPSIRT@huawei.com.

For general problems about Huawei products and solutions, please directly contact Huawei TAC (Huawei Technical Assistance Center) to request the configuration or technical assistance.


2015-11-10 V1.1 UPDATED added CVE ID

2015-11-03 V1.0 INITIAL

This document is provided on an "AS IS" basis and does not imply any kind of guarantee or warranty, either express or implied, including the warranties of merchantability or fitness for a particular purpose. In no event shall Huawei or any of its directly or indirectly controlled subsidiaries or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages. Your use of the document, by whatsoever means, will be totally at your own risk. Huawei is entitled to amend or update this document from time to time.


Complete information for providing feedback on security vulnerability of Huawei products, getting support for Huawei security incident response services, and obtaining Huawei security vulnerability information, is available on Huawei's worldwide website at http://www.huawei.com/en/security/psirt/.