CVE-2017-8159: Incorrect Type Cast
Some Huawei smartphones with software AGS-L09C233B019,AGS-W09C233B019,KOB-L09C233B017,KOB-W09C233B012 have a type confusion vulnerability. The program initializes a variable using one type, but it later accesses that variable using a type that is different with the original type when do certain register operation. Successful exploit could result in buffer overflow then may cause malicious code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-8159?
CVE-2017-8159 is a type confusion vulnerability affecting some Huawei smartphones with specific software versions.
Which Huawei smartphones are affected by CVE-2017-8159?
Huawei smartphones with software versions AGS-L09C233B019, AGS-W09C233B019, KOB-L09C233B017, and KOB-W09C233B012 are affected by CVE-2017-8159.
What is the severity of CVE-2017-8159?
CVE-2017-8159 has a severity score of 7.8 (critical).
How does CVE-2017-8159 work?
CVE-2017-8159 is a type confusion vulnerability where a variable is initialized using one type but later accessed using a different type, leading to potential security issues during certain operations.
How can I fix CVE-2017-8159?
To fix CVE-2017-8159, users should update their Huawei smartphones to the latest software versions provided by Huawei.