Vulnerability in Huawei Agassi-L09hn
CVE-2017-8159
Some Huawei smartphones with software AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012 have a type confusion vulnerability. The program initializes a variable using one type, but it later accesses that variable using a type that is different with the original type when do certain register operation. Successful exploit could result in buffer overflow then may cause malicious code execution.
EPSS: 0.010 (60.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Huawei Agassi-l09hn
- Huawei Agassi-l09hn_firmware — versions ags-l09c233b019
- Huawei Agassi-w09hn
- Huawei Agassi-w09hn_firmware — versions ags-w09c233b019
- Huawei Kobe-l09ahn
- Huawei Kobe-l09ahn_firmware — versions kob-l09c233b017
- Huawei Kobe-w09chn
- Huawei Kobe-w09chn_firmware — versions kob-w09c233b012
- Huawei Technologies Co., Ltd. Agassi-l09hn,agassi-w09hn,kobe-l09ahn,kobe-w09chn, — versions AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012
Weakness classification (CWE)
References
- psirt@huawei.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2017-8159?
- CVE-2017-8159 is a high-severity vulnerability in Huawei Agassi-L09hn, classified under Incorrect Type Conversion or Cast. CVSS score: 7.8/10. Published 2017-11-22.
- How severe is CVE-2017-8159?
- High severity. CVSS v3 base score is 7.8 out of 10.