CVE-2017-17320: Double Free
Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188 have a memory double free vulnerability. The system does not manage the memory properly, that frees on the same memory address twice. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in malicious code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-17320?
CVE-2017-17320 is a vulnerability in Huawei Mate 9 Pro smartphones with certain software versions, which allows an attacker to perform a memory double free attack by tricking the user with root privilege to install malicious software.
What is the severity of CVE-2017-17320?
CVE-2017-17320 has a severity rating of 7.8 (Critical).
Which Huawei Mate 9 Pro software versions are affected by CVE-2017-17320?
Huawei Mate 9 Pro software versions LON-AL00BC00B139D, LON-AL00BC00B229, and LON-L29DC721B188 are affected by CVE-2017-17320.
How can an attacker exploit CVE-2017-17320?
An attacker can exploit CVE-2017-17320 by tricking a user with root privilege to install a malicious software, which can then perform a memory double free attack.
How to fix CVE-2017-17320?
To fix CVE-2017-17320, users are advised to update their Huawei Mate 9 Pro software to a version that is not affected by the vulnerability. Please refer to the official Huawei security advisory for more information.