Security Advisory - Two DoS Vulnerabilities in the HIFI Driver of Huawei Smart Phone

Some Huawei smart phones have two DoS (Denial of Service) security vulnerabilities in the HIFI driver. An attacker may trick a user into installing a malicious application and use the application to input null pointer as parameter, which can reboot the system. (Vulnerability ID: HWPSIRT-2015-10038 and HWPSIRT-2015-11008)

The HWPSIRT-2015-11008 vulnerability has been assigned Common Vulnerabilities and Exposures (CVE) ID: CVE-2015-8337.

Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link: <http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-465304.htm&gt;