CVE-2017-8141: Double Free
The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker with the root privilege of the Android system tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2017-8141.
What is the severity of CVE-2017-8141?
The severity of CVE-2017-8141 is critical with a severity value of 7.8.
What is the description of CVE-2017-8141?
CVE-2017-8141 is a memory double free vulnerability in the Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153.
Which software versions of P10 Plus smart phones are affected by CVE-2017-8141?
P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 are affected by CVE-2017-8141.
How can an attacker exploit CVE-2017-8141?
An attacker with root privilege of the Android system can trick a user into installing a malicious application, which can start multiple threads to exploit the vulnerability.