CVE-2017-8149
Medium
Description
The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds memory access vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. the APP can modify specific data to cause buffer overflow in the next system reboot, causing out-of-bounds memory read which can continuous system reboot.
SeverityMedium
CVSS5.5
Exploit probability—
ProductHuawei P10 Firmware
PublishedNov 22, 2017
First seenNov 22, 2017
How to fix
Update
- huawei p10_firmwarevictoria-l09ac605b162, victoria-l29ac605b162 or later
- huawei p10_plus_firmwarevicky-l29ac605b162 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei p10_firmware | v < victoria-l09ac605b162, v < victoria-l29ac605b162 | victoria-l09ac605b162, victoria-l29ac605b162 |
| huawei p10_plus_firmware | v < vicky-l29ac605b162 | vicky-l29ac605b162 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.