CVE-2017-2726

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.

Score

CVSS 3.0 8.4 High

Status

Modified - psirt@huawei.com

Published

2017-11-22

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• P10 Firmware (Huawei)
• P10 Plus Firmware (Huawei)
• P10 Plusp10 (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-01-smartphone-en
• http://www.securityfocus.com/bid/97696