CVE-2017-2698

published 2017-11-22

CVE-2017-2698: The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system…

high 7.8 CVSS 3.0

AV L AC L PR N UI R S U C H I H A H

The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
huawei	p8_firmware	< gra-ul00c00b197	gra-ul00c00b197
huawei_technologies_co_ltd	p8	—	—

CWE-119