CVE-2017-8149
The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds memory access vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. the APP can modify specific data to cause buffer overflow in the next system reboot, causing out-of-bounds memory read which can continuous system reboot.
Published:Nov 22, 2017
Last Modified:Apr 20, 2025
EPS:Nov 22, 2017
EPSS Score:0.00063
CVSS Score:5.5
Affected Products
Vendor
Product
Action
Vendor
Huawei
Product
P10
Huawei
P10
Vendor
Huawei
Product
P10 Firmware
Huawei
P10 Firmware
Vendor
Huawei
Product
P10 Plus
Huawei
P10 Plus
Vendor
Huawei
Product
P10 Plus Firmware
Huawei
P10 Plus Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
