CVE-2015-8088
HIGHHuawei P8 and Mate 7 Firmware - Heap-Based Buffer Overflow in HIFI Driver
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-8088. PoCs published by pray3r, Pray3r.
AI-analyzed exploit summary This PoC exploits a buffer overflow vulnerability in the HuaWei Mate7 hifi driver by sending a maliciously large input via ioctl. The code allocates a large buffer (300KB) and passes it to the vulnerable driver, likely triggering a denial-of-service or potential code execution.
Description
Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7-TL10 before MT7-TL10C00B354, MT7-TL00 before MT7-TL00C01B354, and MT7-CL00 before MT7-CL00C92B354 and P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, GRA-CL10 before GRA-CL10C92B220, GRA-UL00 before GRA-UL00C00B220, and GRA-UL10 before GRA-UL10C00B220 allows attackers to cause a denial of service (reboot) or execute arbitrary code via a crafted application.
Exploits (2)
This PoC exploits a buffer overflow vulnerability in the HuaWei Mate7 hifi driver by sending a maliciously large input via ioctl. The code allocates a large buffer (300KB) and passes it to the vulnerable driver, likely triggering a denial-of-service or potential code execution.
This repository contains a functional proof-of-concept exploit for CVE-2015-8088, a heap-based buffer overflow in the HiFi driver of Huawei smartphones. The PoC triggers the vulnerability by sending a maliciously crafted IOCTL request to the /dev/hifi_misc device, demonstrating the potential for denial-of-service (DoS) or further exploitation.
References (2)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H