Vulnerabilities > CVE-2017-15316 - Double Free vulnerability in Huawei Mate 9 Firmware and Mate 9 PRO Firmware

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
huawei
CWE-415
critical
NVD
Published: 2017-12-22
Updated: 2018-01-05

Summary

The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which triggers double free and causes a system crash or arbitrary code execution.

Vulnerable Configurations

Part Description Count
OS
Huawei
11
Hardware
Huawei
2

Common Weakness Enumeration (CWE)

References