HIGH🇬🇧 English

CVE-2017-8150

CVSS 7.8v3.0pub. 2017-11-22upd. 2026-05-13

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause arbitrary memory writing in the next system reboot, causing continuous system reboot or arbitrary code execution.

oryginał EN
CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • Huawei P10

    HW
    Huawei
    wszystkie wersje
  • Huawei P10 Firmware

    OS
    Huawei
    < victoria-l29ac605b162< victoria-l09ac605b162
  • Huawei P10 Plus

    HW
    Huawei
    wszystkie wersje
  • Huawei P10 Plus Firmware

    OS
    Huawei
    < vicky-l29ac605b162
  • Huawei P8 Lite

    HW
    Huawei
    wszystkie wersje
  • Huawei P8 Lite Firmware

    OS
    Huawei
    < ale-l21c113b566
  • Huawei P9

    HW
    Huawei
    wszystkie wersje
  • Huawei P9 Firmware

    OS
    Huawei
    < eva-l09c432b391< eva-l09c576b386< eva-l09c605b390< eva-l09c635b387< eva-l09c636b388< eva-l19c10b390< eva-l19c432b388< eva-l19c605b390< eva-l19c636b391
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
CWE
Referencje

Powiązane podatności

CVE-2017-2724HIGH8.4ten sam produkt

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-...

CVE-2017-2725HIGH7.8ten sam produkt

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-...

CVE-2017-2692HIGH7.8ten sam produkt

The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C...

CVE-2017-2693HIGH7.8ten sam produkt

ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,...

CVE-2017-2726HIGH8.4ten sam produkt

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-...