Huawei P10/P10 Plus Boot Loader Parameter memory corruption

Summaryinfo

A vulnerability has been found in Huawei P10 and P10 Plus and classified as critical. Affected is an unknown function of the component Boot Loader. The manipulation as part of Parameter leads to memory corruption. This vulnerability is traded as CVE-2017-8149. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.

Detailsinfo

A vulnerability was found in Huawei P10 and P10 Plus (Smartphone Operating System) (the affected version unknown). It has been rated as critical. This issue affects an unknown part of the component Boot Loader. The manipulation as part of a Parameter leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

The boot loaders of P10 and P10 Plus Huawei mobile phones with software the versions before Victoria-L09AC605B162, the versions before Victoria-L29AC605B162, the versions before Vicky-L29AC605B162 have an out-of-bounds memory access vulnerability due to the lack of parameter validation. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. the APP can modify specific data to cause buffer overflow in the next system reboot, causing out-of-bounds memory read which can continuous system reboot.

The bug was discovered 08/16/2017. The weakness was shared 11/22/2017 (Website). The advisory is shared at huawei.com. The identification of this vulnerability is CVE-2017-8149 since 04/25/2017. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available.

The vulnerability was handled as a non-public zero-day exploit for at least 98 days. During that time the estimated underground price was around $5k-$25k.

Upgrading eliminates this vulnerability.

The entries VDB-109890, VDB-109886 and VDB-109885 are related to this item. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Smartphone Operating System

Vendor

• Huawei

Name

• P10
• P10 Plus

License

• commercial

Website

• Vendor: https://www.huawei.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion