CVE-2017-2726

published 2017-11-22

CVE-2017-2726: Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow…

Priority P3 43 high 8.4 CVSS 3.0

AV L AC L PR N UI N S U C H I H A H

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
huawei	p10_firmware	< vtr-al00c00b123	vtr-al00c00b123
huawei	p10_plus_firmware	< vky-al00c00b123	vky-al00c00b123

CVSS provenance

nvd v3.0 8.4 HIGH CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 9.3 CRITICAL AV:N/AC:M/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119