CVE-2017-8203

HIGH

Huawei Nova 2 and Nova 2 Plus Firmware < BAC-AL00C00B173, < PIC-AL00C00B173 - Use-After-Free in Bastet Driver

Title source: llm

Description

The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/101960

Scores

CVSS v3 7.8

EPSS 0.0026

EPSS Percentile 49.1%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-416

Status published

Products (3)

huawei/nova_2_firmware < pic-al00c00b173

huawei/nova_2_plus_firmware < bac-al00c00b173

Huawei Technologies Co., Ltd./Nova 2 Plus,Nova 2 Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173

Published Nov 22, 2017

Tracked Since Feb 18, 2026