CVE-2017-15316

CWE-4153 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 69.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Huawei Mate 9 FirmwareHuawei Mate 9 PRO FirmwareHuawei Technologies Co., Ltd. Mate 9+1 more
Timeline
PublishedDec 22
Latest updateMay 14

Description

The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software before LON-AL00B 8.0.0.334(C00) has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can call special API, which triggers double free and causes a system crash or arbitrary code execution.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶NVDhuawei/mate_9_firmware< mha-al00b_8.0.0.334\(c00\)
▶NVDhuawei/mate_9_pro_firmware< lon-al00b_8.0.0.334\(c00\)
▶CVEListV5huawei_technologies_co.,_ltd./mate_9before MHA-AL00B 8.0.0.334(C00)
▶CVEListV5huawei_technologies_co.,_ltd./mate_9_probefore LON-AL00B 8.0.0.334(C00)

🔴Vulnerability Details

2
GHSA
GHSA-r9g8-36p4-9ggj: The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8↗2022-05-14
▶
CVEList
CVE-2017-15316: The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8↗2017-12-22
▶
CVE-2017-15316 (HIGH CVSS 7.8) | The GPU driver of Mate 9 Huawei sma | cvebase.io