CVE Feed

    Dashboard / CVE / CVE-2017-8140

    CVE-2017-8140

    The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution.

    Published:Nov 22, 2017
    Last Modified:Apr 20, 2025
    EPS:Nov 22, 2017
    EPSS Score:0.00114
    CVSS Score:7.8

    Affected Products

    Vendor
    Huawei
    Product
    P9 Plus
    Vendor
    Huawei
    Product
    P9 Plus Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-415 Double Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-17171 (CVSS 4.2) — Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of mali…
    CVE-2016-8783 (CVSS 7.8) — Touchscreen drive in Huawei H60 (Honor 6) Versions earlier than H60-L02_6.12.16 and P9 Plus Versions earlier t…
    CVE-2017-2731 (CVSS 5.5) — The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vul…
    CVE-2017-2711 (CVSS 5.5) — P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability…
    CVE-2017-2734 (CVSS 5.5) — P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vuln…
    CVE-2016-8759 (CVSS 7.8) — Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with …
    CVE-2016-8760 (CVSS 7.8) — Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones…
    CVE-2016-8761 (CVSS 7.8) — Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High