PT-2017-18150

CVE-2017-8141

·

Publicado

2017-11-22

·

Atualizado

2017-12-11

Descrição por

CVSS 2.0
9.3
Alta
MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions P10 Plus smart phones with software versions earlier than VKY-AL00C00B153
Description The issue concerns a memory double free vulnerability in the Touch Panel driver. An attacker with root privilege of the Android system can trick a user into installing a malicious application. This application can start multiple threads and attempt to free specific memory, potentially triggering a double free condition. This could lead to a system crash or allow for arbitrary code execution.
Recommendations For P10 Plus smart phones with software versions earlier than VKY-AL00C00B153, update to a version VKY-AL00C00B153 or later to resolve the issue. As a temporary workaround, consider restricting the installation of applications from untrusted sources to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾