What is CVE-2016-8783?

CVE-2016-8783 is a high-severity vulnerability in Huawei Honor_6, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2018-03-09.

How severe is CVE-2016-8783?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in Huawei Honor_6

CVE-2016-8783

Touchscreen drive in Huawei H60 (Honor 6) Versions earlier than H60-L02_6.12.16 and P9 Plus Versions earlier than VIE-AL10BC00B356 has a stack overflow vulnerabilities. An attacker tricks a user into installing a malicious application on t…

Vulnerability class: Buffer Overflow

EPSS: 0.009 (56.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Huawei Honor_6
Huawei Honor_6_firmware
Huawei P9_plus
Huawei P9_plus_firmware
Huawei Technologies Co., Ltd. H60 (Honor 6), P9 Plus — versions Versions earlier than H60-L02_6.12.16, Versions earlier than?VIE-AL10BC00B356

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

psirt@huawei.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2016-8783?: CVE-2016-8783 is a high-severity vulnerability in Huawei Honor_6, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2018-03-09.
How severe is CVE-2016-8783?: High severity. CVSS v3 base score is 7.8 out of 10.