CVE-2017-8142
High
Description
The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to create and free specific memory, which could triggers access memory after free it and causes a system crash or arbitrary code execution.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHuawei Mate 9 Firmware
PublishedNov 22, 2017
First seenNov 22, 2017
How to fix
Update
- huawei mate_9_firmwaremha-al00bc00b221 or later
- huawei mate_9_pro_firmwarelon-al00bc00b221 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei mate_9_firmware | v < mha-al00bc00b221 | mha-al00bc00b221 |
| huawei mate_9_pro_firmware | v < lon-al00bc00b221 | lon-al00bc00b221 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.