VULNERABILITY INTELLIGENCE

CVE-2017-2724

CVSS score8.4 HIGH

EPSS probability1.35%

CISA KEVNot currently listed

Published2017-11-22

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.

Weakness classification

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

psirt@huawei.com — Vendor Advisory
psirt@huawei.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry