Description (CNA)
The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Huawei Technologies Co., Ltd. / Nova 2 Plus,Nova 2 | affected Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 |
CWE
No CWE identifiers supplied.
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170927-01-smartphone-en
- http://www.securityfocus.com/bid/101960
ADP enrichment
No English description supplied.