Huawei Mate 7 Firmware vulnerabilities

6 CVEs affecting Huawei Mate 7 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-2693, published 2017-11-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-8088, published 2016-01-12. High severity, CVSS 7.8. EPSS: 3.8% chance of exploitation in the next 30 days. Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00…
CVE-2017-2693, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days. ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and earlier versions,ALE-L21C464B150…
CVE-2017-2692, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B214 and…
CVE-2015-4421, published 2017-10-19. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. The tzdriver module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service (memory corruption) via an unspecified…
CVE-2015-8337, published 2016-01-12. Medium severity, CVSS 5.5. EPSS: 0.8% chance of exploitation in the next 30 days. The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, GRA-UL10…
CVE-2015-4422, published 2017-10-19. High severity, CVSS 7.0. EPSS: 0.6% chance of exploitation in the next 30 days. The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service (memory corruption)…