CVE-2017-8142
HIGHHuawei Mate 9 and Mate 9 Pro Firmware < MHA-AL00BC00B221, < LON-AL00BC00B221 - Use-After-Free in TEE Module Driver
Title source: llmDescription
The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to create and free specific memory, which could triggers access memory after free it and causes a system crash or arbitrary code execution.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170615-01-smartphone-en
Scores
CVSS v3
7.8
EPSS
0.0020
EPSS Percentile
42.0%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-416
Status
published
Products (3)
huawei/mate_9_firmware
< mha-al00bc00b221
huawei/mate_9_pro_firmware
< lon-al00bc00b221
Huawei Technologies Co., Ltd./Mate 9, Mate 9 Pro
Versions earlier than MHA-AL00BC00B221, Versions earlier than LON-AL00BC00B221
Published
Nov 22, 2017
Tracked Since
Feb 18, 2026