The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution.
References
Link | Resource |
---|---|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en | Vendor Advisory |
http://www.securityfocus.com/bid/101960 | Third Party Advisory VDB Entry |
Configurations
History
No history.
Information
Published : 2017-11-22 19:29
Updated : 2024-02-28 16:04
NVD link : CVE-2017-8203
Mitre link : CVE-2017-8203
CVE.ORG link : CVE-2017-8203
JSON object : View
Products Affected
huawei
- nova_2_plus
- nova_2
- nova_2_firmware
- nova_2_plus_firmware
CWE
CWE-416
Use After Free