Vulnerability Details CVE-2017-8140
The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.4%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 9.3
References
Products affected by CVE-2017-8140
-
cpe:2.3:h:huawei:p9_plus:-
-
cpe:2.3:o:huawei:p9_plus_firmware:eva-l09c636b388
-
cpe:2.3:o:huawei:p9_plus_firmware:vie-al10