CVE-2017-8203
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution.
El controlador Bastet de los smartphones Huawei Nova 2 Plus, Nova 2 con versiones de software anteriores a BAC-AL00C00B173 y PIC-AL00C00B173 tiene una vulnerabilidad de uso de memoria previamente liberada. Un atacante puede engañar a un usuario para que instale una aplicación maliciosa con un nivel alto de privilegios para explotar esta vulnerabilidad. Una explotación exitosa podría causar la ejecución de código arbitrario.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2017-04-25 CVE Reserved
- 2017-11-22 CVE Published
- 2024-06-18 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-416: Use After Free
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/101960 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en | 2017-12-11 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Huawei Search vendor "Huawei" | Nova 2 Firmware Search vendor "Huawei" for product "Nova 2 Firmware" | < pic-al00c00b173 Search vendor "Huawei" for product "Nova 2 Firmware" and version " < pic-al00c00b173" | - |
Affected
| in | Huawei Search vendor "Huawei" | Nova 2 Search vendor "Huawei" for product "Nova 2" | - | - |
Safe
|
Huawei Search vendor "Huawei" | Nova 2 Plus Firmware Search vendor "Huawei" for product "Nova 2 Plus Firmware" | < bac-al00c00b173 Search vendor "Huawei" for product "Nova 2 Plus Firmware" and version " < bac-al00c00b173" | - |
Affected
| in | Huawei Search vendor "Huawei" | Nova 2 Plus Search vendor "Huawei" for product "Nova 2 Plus" | - | - |
Safe
|