CVE-2017-15330 — Huawei Technologies Co., Ltd. / Vicky-AL00A

Description (CNA)

The Flp Driver in some Huawei smartphones of the software Vicky-AL00AC00B124D, Vicky-AL00AC00B157D, Vicky-AL00AC00B167 has a double free vulnerability. An attacker can trick a user to install a malicious application which has a high privilege to exploit this vulnerability. Successful exploitation may cause denial of service (DoS) attack.

Affected (CNA)

Vendor / product	Versions
Huawei Technologies Co., Ltd. / Vicky-AL00A	affected Vicky-AL00AC00B124D, Vicky-AL00AC00B157D, Vicky-AL00AC00B167

CWE

No CWE identifiers supplied.

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-smartphone-en

ADP enrichment

CVE

No English description supplied.

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171206-01-smartphone-en