CVE-2017-2725

HIGH

Huawei P10 and P10 Plus Firmware < VTR-AL00C00B123, < VKY-AL00C00B123 - Buffer Overflow via Malicious APP

Title source: llm
STIX 2.1

Description

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/97696

Scores

CVSS v3 7.8
EPSS 0.0017
EPSS Percentile 37.8%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (3)
huawei/p10_firmware < vtr-al00c00b123
huawei/p10_plus_firmware < vky-al00c00b123
Huawei Technologies Co., Ltd./P10 Plus,P10 Eariler than VKY-AL00C00B123 verisons,Earlier than VTR-AL00C00B123 versions
Published Nov 22, 2017
Tracked Since Feb 18, 2026