CVE-2017-8159

2017-11-1500:00:00

huawei

www.cve.org

0.001 Low

EPSS

Percentile

38.7%

JSON

Some Huawei smartphones with software AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012 have a type confusion vulnerability. The program initializes a variable using one type, but it later accesses that variable using a type that is different with the original type when do certain register operation. Successful exploit could result in buffer overflow then may cause malicious code execution.

CNA Affected

[
  {
    "product": "Agassi-L09HN,Agassi-W09HN,Kobe-L09AHN,Kobe-W09CHN,",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171018-02-smartphone-en

0.001 Low

EPSS

Percentile

38.7%

JSON

Related for CVELIST:CVE-2017-8159