CVE Feed

    Dashboard / CVE / CVE-2017-2698

    CVE-2017-2698

    The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege.

    Published:Nov 22, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 22, 2017
    EPSS Score:0.00058
    CVSS Score:7.8

    Affected Products

    Vendor
    Huawei
    Product
    P8
    Vendor
    Huawei
    Product
    P8 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2017-2693 (CVSS 7.8) — ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,…
    CVE-2017-2692 (CVSS 7.8) — The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C…
    CVE-2015-8224 (CVSS 3.7) — Huawei P8 before GRA-CL00C92B210, before GRA-L09C432B200, before GRA-TL00C01B210, and before GRA-UL00C00B210 a…
    CVE-2016-8794 (CVSS 7.1) — Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions …
    CVE-2016-8792 (CVSS 7.1) — Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions …
    CVE-2016-8793 (CVSS 6.7) — Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions …
    CVE-2016-8774 (CVSS 6.7) — The HIFI driver in Huawei Mate 8 phones with software versions before NXT-AL10C00B386, versions before NXT-CL0…
    CVE-2016-8791 (CVSS 7.1) — Huawei Mate 8 phones with software Versions before NXT-AL10C00B386, Versions before NXT-CL00C92B386, Versions …
    CVE-2015-8678 (CVSS 5.5) — The ION driver in Huawei P8 smartphones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GRA-CL0…
    CVE-2016-8279 (CVSS 5.5) — The video driver in Huawei Mate S smartphones with software CRR-TL00 before CRR-TL00C01B362, CRR-UL20 before C…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High