CVEvulnerability

CVE-2017-17320

7.8 HIGH Published 2018-03-20 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2018-03-20
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-415

Description

Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188 have a memory double free vulnerability. The system does not manage the memory properly, that frees on the same memory address twice. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in malicious code execution.

Affected configurations

• huawei mate 9 pro firmware lon-al00bc00b139d • huawei mate 9 pro firmware lon-al00bc00b229 • huawei mate 9 pro firmware lon-l29dc721b188

Weakness · CWE (1)

CWE-415 Double Free weakness

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-02-smartphone-en Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-02-smartphone-en Vendor Advisory

CVE-2017-17320

Description

Affected configurations

Related

Weakness · CWE (1)

References