CVE-2017-2724: Buffer Overflow
Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-2724?
CVE-2017-2724 is a buffer overflow vulnerability found in Huawei P10 Plus and P10 smartphones with software earlier than VKY-AL00C00B123 and VTR-AL00C00B123 versions.
How severe is CVE-2017-2724?
CVE-2017-2724 is rated as critical with a severity score of 8.4 (out of 10).
What is the affected software?
The affected software includes Huawei P10 Plus and P10 smartphones with software earlier than VKY-AL00C00B123 and VTR-AL00C00B123 versions.
How can an attacker exploit CVE-2017-2724?
An attacker with root privilege of an Android system can trick a user into installing a malicious app, which can then modify specific information or launch other attacks.
How can I fix CVE-2017-2724?
To fix CVE-2017-2724, users should update their Huawei P10 Plus and P10 smartphones to software versions VKY-AL00C00B123 and VTR-AL00C00B123 or later provided by Huawei.