CVE-2017-8150

Published: Nov 22, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an arbitrary memory write vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause arbitrary memory writing in the next system reboot, causing continuous system reboot or arbitrary code execution.

Affected (13)

Products: Huawei: P10 Firmware, P10 Plus Firmware, P8 Lite Firmware, P9 Firmware

4 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P10 Firmware	Before victoria-l09ac605b162

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P10 Firmware	Before victoria-l29ac605b162

Running on/with	Platform Versions
Huawei P10	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P10 Plus Firmware	Before vicky-l29ac605b162

Running on/with	Platform Versions
Huawei P10 Plus	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P8 Lite Firmware	Before ale-l21c113b566

Running on/with	Platform Versions
Huawei P8 Lite	All versions

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P9 Firmware	Before eva-l09c432b391

Configuration F

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P9 Firmware	Before eva-l09c576b386

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P9 Firmware	Before eva-l09c605b390

Configuration H

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P9 Firmware	Before eva-l09c635b387

Configuration I

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P9 Firmware	Before eva-l09c636b388

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P9 Firmware	Before eva-l19c10b390

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P9 Firmware	Before eva-l19c432b388

Configuration L

1 vulnerable

Vulnerable Software	Affected Versions
Huawei P9 Firmware	Before eva-l19c605b390

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei P9 Firmware	Before eva-l19c636b391

Running on/with	Platform Versions
Huawei P9	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-02-smartphone-en

Source: psirt@huawei.com

Issue TrackingVendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-02-smartphone-en

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingVendor Advisory

Timeline

No history available yet.