Use After Free Vulnerability in Huawei Mate 9 and Mate 9 Pro Smartphones

CVE-2017-8142

Summary

The Trusted Execution Environment (TEE) module driver in Huawei's Mate 9 and Mate 9 Pro smartphones is susceptible to a use after free vulnerability. In particular, this flaw occurs when an attacker persuades a user to install a malicious application. This application can initiate multiple threads and manipulate memory allocation by creating and freeing specific memory objects. Such actions can compromise memory access, potentially leading to a system crash or arbitrary code execution. Users should ensure their devices are updated to the latest software versions to mitigate this risk. For further information, please refer to Huawei's security advisory.

References