CVE-2017-8148: Race Condition
First published: Wed Nov 22 2017(Updated: )
Audio driver in P9 smartphones with software The versions before EVA-AL10C00B389 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the race condition cause null pointer accessing during the application access shared resource, which make the system reboot.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei P9 Firmware | <eva-al10c00b389 | |
| Huawei P9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this audio driver issue in Huawei P9 smartphones?
The vulnerability ID for this audio driver issue in Huawei P9 smartphones is CVE-2017-8148.
What is the severity of CVE-2017-8148?
The severity of CVE-2017-8148 is medium, with a severity value of 4.7.
What is the affected software for CVE-2017-8148?
The affected software for CVE-2017-8148 is Huawei P9 smartphones with software versions before EVA-AL10C00B389.
What is the impact of CVE-2017-8148?
CVE-2017-8148 is a denial of service (DoS) vulnerability that can be exploited by an attacker to cause null pointer accessing during the application access shared.
Is there a fix or patch available for CVE-2017-8148?
To mitigate the vulnerability, users should update their Huawei P9 smartphones to software version EVA-AL10C00B389 or later.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei p9 firmware
- canonical/huawei p9