CVE-2017-15347

CWE-416 — Use After Free3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 78.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei Technologies Co., Ltd. Mate 9 PROHuawei Mate 9 PRO Firmware
Timeline
PublishedFeb 15
Latest updateMay 14

Description

Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can riggers access memory after free it. A local attacker may exploit this vulnerability to cause the mobile phone to crash.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/mate_9_pro_firmwarelon-al00bc00b235
▶CVEListV5huawei_technologies_co.,_ltd./mate_9_proVersions earlier than LON-AL00BC00B235

🔴Vulnerability Details

2
GHSA
GHSA-hp8r-934f-8wjx: Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free (UAF) vulnerability↗2022-05-14
▶
CVEList
CVE-2017-15347: Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free (UAF) vulnerability↗2018-02-15
▶
CVE-2017-15347 (MEDIUM CVSS 5.5) | Huawei Mate 9 Pro mobile phones wit | cvebase.io