Vulnerability Details CVE-2017-8203
The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.0%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
Products affected by CVE-2017-8203
-
cpe:2.3:h:huawei:nova_2:-
-
cpe:2.3:h:huawei:nova_2_plus:-
-
cpe:2.3:o:huawei:nova_2_firmware:*
-
cpe:2.3:o:huawei:nova_2_plus_firmware:8.0.0.350(c00)