CVE-2017-8140

Published: Nov 22, 2017

Modified: Sep 17, 2024

PUBLISHED

Description

The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution.

Vendor	Product	Versions
Huawei Technologies Co., Ltd.	P9 Plus	affected `Versions earlier than VIE-AL10BC00B353`

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170605-01-smartphone-en

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-8140

Description

Affected Products

References