Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-8141

Опубликовано: 22 нояб. 2017
Источник: nvd
CVSS3: 7.8
CVSS2: 9.3
EPSS Низкий

Описание

The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker with the root privilege of the Android system tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:p10_plus_firmware:*:*:*:*:*:*:*:*
Версия до vky-al00c00b153 (исключая)
cpe:2.3:h:huawei:p10_plus:-:*:*:*:*:*:*:*

EPSS

Процентиль: 30%
0.00114
Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-415

Связанные уязвимости

CVSS3: 7.8
github
больше 3 лет назад

The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker with the root privilege of the Android system tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution.

EPSS

Процентиль: 30%
0.00114
Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-415