CVE-2017-8140
HIGHHuawei P9 Plus Firmware < VIE-AL10BC00B353 - Double Free in Soundtrigger Driver
Title source: llmDescription
The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170605-01-smartphone-en
Scores
CVSS v3
7.8
EPSS
0.0011
EPSS Percentile
29.6%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-415
Status
published
Products (2)
huawei/p9_plus_firmware
< vie-al10bc00b353
Huawei Technologies Co., Ltd./P9 Plus
Versions earlier than VIE-AL10BC00B353
Published
Nov 22, 2017
Tracked Since
Feb 18, 2026