9.3

CVE-2017-8159

Some Huawei smartphones with software AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012 have a type confusion vulnerability. The program initializes a variable using one type, but it later accesses that variable using a type that is different with the original type when do certain register operation. Successful exploit could result in buffer overflow then may cause malicious code execution.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ Agassi-l09hn Firmware Version ags-l09c233b019
   Huawei ≫ Agassi-l09hn Version -
Huawei ≫ Agassi-w09hn Firmware Version ags-w09c233b019
   Huawei ≫ Agassi-w09hn Version -
Huawei ≫ Kobe-l09ahn Firmware Version kob-l09c233b017
   Huawei ≫ Kobe-l09ahn Version -
Huawei ≫ Kobe-w09chn Firmware Version kob-w09c233b012
   Huawei ≫ Kobe-w09chn Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.04% 0.594
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-704 Incorrect Type Conversion or Cast

The product does not correctly convert an object, resource, or structure from one type to a different type.

http://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171018-02-smartphone-en
Vendor Advisory