Buffer Overflow Vulnerability in Huawei P10 Smart Phones
CVE-2017-2725

7.8HIGH

Key Information:

Vendor

McAfee
Status
P10 Plus,p10
Vendor
CVE Published:
22 November 2017

What is CVE-2017-2725?

A buffer overflow vulnerability exists in the Bastet application on Huawei P10 Plus and P10 smartphones, affecting software versions prior to VKY-AL00C00B123 and VTR-AL00C00B123. This vulnerability allows an attacker with root privileges on an Android system to deceive users into installing a malicious application. Once installed, the malicious app can manipulate specific data, leading to a buffer overflow during the next system reboot. The exploitation of this vulnerability may result in continuous system reboots or arbitrary code execution, compromising device integrity and user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

P10 Plus,P10 Eariler than VKY-AL00C00B123 verisons,Earlier than VTR-AL00C00B123 versions

References

http://www.securityfocus.com/bid/97696
vdb-entryx_refsource_BID
http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.