Security Advisory - Local Permission Escalation Vulnerability in GPU of P7 Phones
- SA No:Huawei-SA-20151103-01-GPU
- Initial Release Date: 2015-11-03
- Last Release Date: 2015-11-10
The graphics processing unit (GPU) of Huawei P7 phones have a local permission escalation vulnerability.GPU does not properly validate the specific input parameters. An attacker may trick a user into installing a malicious application and use the application to read and modify product memory address, which can crash the system or cause permission escalation. (Vulnerability ID: HWPSIRT-2015-09018)
This vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-8089.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-460276.htm
|
Product Name |
Affected Version |
Resolved Product and Version |
|
P7 |
Versions earlier than P7-L00C17B851 |
P7-L00C17B851 |
|
Versions earlier than P7-L05C00B851 |
P7-L05C00B851 |
|
|
Versions earlier than P7-L09C92B851 |
P7-L09C92B851 |
An attacker may exploit this vulnerability to crash the system or cause permission escalation.
The vulnerability classification has been performed by using the CVSSv2 scoring system (http://www.first.org/cvss/).
Base Score: 6.2 (AV:L/AC:H/Au:N/C:C/I:C/A:C)
Temporal Score: 5.1 (E:F/RL:OF/RC:C)
1. Prerequisite:
The attacker successfully tricks a user into installing a malicious application on the device.
2. Attacking procedure:
The attacker tricks a user into installing a malicious application on the device. The malicious application can access specific GPU driver interfaces of the products by system calls. The GPU driver does not properly validate the specific address input by the application. Therefore, the attacker can exploit this application to read and modify product kernel memory address, which can crash the system or cause permission escalation.
This vulnerability was reported by Hang Zhang/ Dongdong She/Zhiyun Qian from University of California, Riverside and by Yanfeng Wang/Chiachih Wu/ Xuxian Jiang of C0RE Team from Qihoo 360. Huawei PSIRT is not aware of malicious use of the vulnerability described in this advisory.
Huawei express our appreciation for their concerns on Huawei products.
For security problems about Huawei products and solutions, please contactPSIRT@huawei.com.
For general problems about Huawei products and solutions, please directly contact Huawei TAC (Huawei Technical Assistance Center) to request the configuration or technical assistance.
2015-11-10 V1.1 UPDATED added CVE ID
2015-11-03 V1.0 INITIAL
None
