CVE-2015-8088
highpriority · track · 42EPSS 0.038 · 90 %ileexploit · PoCEUUSEPSS · scored 2026-10-28
Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (2)
Public proof-of-concept and weaponised exploit code.
- EDB-44306Huawei Mate 7 - '/dev/hifi_misc' Privilege EscalationPoC · exploit_db
- Pray3r/CVE-2015-8088Crash PoCPoC · poc_in_github
affected products (10)
Products and version ranges known to be affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- http://www.huawei.com/cn/security/psirt/security-bulletins/security-advisories/hw-460348.htmcnnvd
- http://www.huawei.com/cn/security/psirt/security-bulletins/security-notices/hw-460364.htm?from=singlemessage&isappinstalled=0cnnvd
- http://www.huawei.com/en/psirt/security-advisories/hw-460347Patchcnnvd
- http://www.huawei.com/en/psirt/security-advisories/hw-460347enisa_euvd
- http://www.securityfocus.com/bid/77560enisa_euvd
- http://www.huawei.com/en/psirt/security-advisories/hw-460347Vendor Advisorynvd
- http://www.securityfocus.com/bid/77560nvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan