Double free

2018-02-1516:29:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can riggers access memory after free it. A local attacker may exploit this vulnerability to cause the mobile phone to crash.

CPENameOperatorVersion
mate_9_pro_firmwareeqlon-al0bc0b235

CPE	Name	Operator	Version
	mate_9_pro_firmware	eq	lon-al0bc0b235

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-phone-en