What is CVE-2017-17320?

CVE-2017-17320 is a high-severity vulnerability in Huawei Mate 9 Pro, classified under Double Free. CVSS score: 7.8/10. Published 2018-03-20.

How severe is CVE-2017-17320?

High severity. CVSS v3 base score is 7.8 out of 10.

Double Free in Huawei Mate 9 Pro

CVE-2017-17320

Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188 have a memory double free vulnerability. The system does not manage the memory properly, that frees on the same memory address twice. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in malicious code execution.

Vulnerability class: Double Free

EPSS: 0.010 (60.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Huawei Mate_9_pro
Huawei Mate_9_pro_firmware — versions lon-al00bc00b139d, lon-al00bc00b229, lon-l29dc721b188
Huawei Technologies Co., Ltd. Mate 9 Pro — versions LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188

Weakness classification (CWE)

CWE-415 — Double Free

References

psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2017-17320?: CVE-2017-17320 is a high-severity vulnerability in Huawei Mate 9 Pro, classified under Double Free. CVSS score: 7.8/10. Published 2018-03-20.
How severe is CVE-2017-17320?: High severity. CVSS v3 base score is 7.8 out of 10.