CVE-2015-4422

The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain privileges or cause a denial of service (memory corruption) via a crafted application.

CVSS v3.0 NVD

7.0 HIGHCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

0.64% chance of exploitation in the next 30 days, 49th percentile

Published

2017-10-19

Updated

2024-08-06

Proof-of-concept exploits (1)

• retme7/mate7_TZ_exploit109★ · 2015-08-04

Security advisories

• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-432799…
• http://www.securityfocus.com/bid/74742

References

• CVE Record
• NVD entry

Related

• CVE-2014-4322
• CVE-2014-7911
• CVE-2014-8609
• CVE-2015-4421