The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds memory access vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. the APP can modify specific data to cause buffer overflow in the next system reboot, causing out-of-bounds memory read which can continuous system reboot.
References
| Link | Resource |
|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-smartphone-en | Issue Tracking Vendor Advisory |
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-smartphone-en | Issue Tracking Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
21 Nov 2024, 03:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-smartphone-en - Issue Tracking, Vendor Advisory |
Information
Published : 2017-11-22 19:29
Updated : 2024-11-21 03:33
NVD link : CVE-2017-8149
Mitre link : CVE-2017-8149
CVE.ORG link : CVE-2017-8149
JSON object : View
Products Affected
huawei
- p10_plus_firmware
- p10_plus
- p10
- p10_firmware
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer