CVE-2017-2698

CWE-119 — Buffer Overflow3 documents3 sources
Severity
7.8HIGH
EPSS
0.1%
top 81.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei P8 FirmwareHuawei Technologies Co., Ltd. P8
Timeline
PublishedNov 22
Latest updateMay 17

Description

The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDhuawei/p8_firmware< gra-ul00c00b197
▶CVEListV5huawei_technologies_co.,_ltd./p8Versions earlier than GRA-UL00C00B197

🔴Vulnerability Details

2
GHSA
GHSA-w223-84fp-45wg: The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability↗2022-05-17
▶
CVEList
CVE-2017-2698: The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability↗2017-11-22
▶
CVE-2017-2698 (HIGH CVSS 7.8) | The ddr_devfreq driver in versions | cvebase.io