Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2698 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:46:57.518Z Vendors: Huawei Technologies Co., Ltd. Products: P8 Problem Types: Buffer Overflow Description: The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system or escalate privilege. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95664 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-
ences: - http://www.securityfocus.com/bid/95664 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-04-smartphone-en
CVE ID: CVE-2017-2699 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T21:09:01.447Z Vendors: Huawei Technologies Co., Ltd. Products: Honor 7, Mate S,LYO-L21 Problem Types: Privilege Elevation Description: The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege elevation vulnerability. An attacker could exploit this vulnerability to upload theme packs containing malicious files and trick users into installing the theme packets, resulting in the execution of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bi
tion of arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/96424 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170222-01-theme-en
CVE ID: CVE-2017-2700 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T16:53:35.031Z Vendors: Huawei Technologies Co., Ltd. Products: AC6005,AC6605 Problem Types: DoS Description: AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes the device memory leaks, leading to DoS attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/102166 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170517-01-ac-en
CVE ID: CVE-2017-2701 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:32:51.854Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Problem Types: DoS Description: Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application. Since the system does not verify the broadcasting message from the application, it could be exploited to cause some functions of system unavailable. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170802-01-broadcasting-en
CVE ID: CVE-2017-2702 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T16:48:33.458Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Problem Types: Phone Finder Bypass Description: Phone Finder in versions earlier before MHA-AL00C00B170 can be bypass. An attacker can bypass the Phone Finder by special steps and obtain the owner of the phone. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170322-01-smartphone-en
CVE ID: CVE-2017-2703 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:46:53.726Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9, P9 Problem Types: Phone Finder Bypass Description: Phone Finder in versions earlier before MHA-AL00BC00B156,Versions earlier before MHA-CL00BC00B156,Versions earlier before MHA-DL00BC00B156,Versions earlier before MHA-TL00BC00B156,Versions earlier before EVA-AL10C00B373,Versions earlier before EVA-CL10C00B373,Versions earlier before EVA-DL10C00B373,Versions earlier before EVA-TL10C00B373 can be bypass. An attacker can bypass the Phone Finder by special steps and enter the System Setting. Additional Analyst Notes: - CVE Program
cker can bypass the Phone Finder by special steps and enter the System Setting. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95657 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-05-smartphone-en
CVE ID: CVE-2017-2704 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T18:39:09.872Z Vendors: Huawei Technologies Co., Ltd. Products: Smarthome,HiAPP,HwParentControl,HwParentControlParent,Crowdtest,HiWallet,Huawei Pay,Skytone,HwCloudDrive(EMUI6.0),HwPhoneFinder?&#xa1;&#xa7;EMUI6.0??,HwPhoneFinder?&#xa1;&#xa7;EMUI5.1??,HiCinema,HuaweiWear,HiHealthApp, Problem Types: Information Exposure Description: Smarthome 1.0.2.364 and earlier versions,HiAPP 7.3.0.303 and earlier versions,HwParentControl 2.0.0 and earlier versions,HwParentControlParent 5.1.0.12 and earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 an
nd earlier versions,Crowdtest 1.5.3 and earlier versions,HiWallet 8.0.0.301 and earlier versions,Huawei Pay 8.0.0.300 and earlier versions,Skytone 8.1.2.300 and earlier versions,HwCloudDrive(EMUI6.0) 8.0.0.307 and earlier versions,HwPhoneFinder(EMUI6.0) 9.3.0.310 and earlier versions,HwPhoneFinder(EMUI5.1) 9.2.2.303 and earlier versions,HiCinema 8.0.2.300 and earlier versions,HuaweiWear 21.0.0.360 and earlier versions,HiHealthApp 3.0.3.300 and earlier versions have an information exposure vulnerability. Encryption keys are stored in the system. The attacker can implement reverse engineering to obtain the encryption keys, causing information exposure. Additional Analyst Notes: - CVE Program C
verse engineering to obtain the encryption keys, causing information exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-encryption-en
CVE ID: CVE-2017-2705 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T02:57:56.604Z Vendors: Huawei Technologies Co., Ltd. Products: Huawei P9 Problem Types: Phone Activation Bypass Description: Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier before EVA-DL00C17B365, versions earlier before EVA-TL00C01B365 have a phone activation bypass vulnerability. Successful exploit could allow an unauthenticated attacker to bypass phone activation to settings page of the phone. Additional Analyst Notes: - CVE Program Container: References: - http://www.
e activation to settings page of the phone. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-02-smartphone-en - http://www.securityfocus.com/bid/95661
CVE ID: CVE-2017-2706 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:52:31.579Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Problem Types: Directory Traversal Description: Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170712-01-push-en
CVE ID: CVE-2017-2707 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:08:32.283Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Problem Types: Privilege Escalation Description: Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170712-02-push-en
CVE ID: CVE-2017-2708 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:41:47.213Z Vendors: Huawei Technologies Co., Ltd. Products: Nice Problem Types: Authentication Bypass Description: The 'Find Phone' function in Nice smartphones with software versions earlier before Nice-AL00C00B0135 has an authentication bypass vulnerability. An unauthenticated attacker may wipe and factory reset the phone by special steps. Due to missing authentication of the 'Find Phone' function, an attacker may exploit the vulnerability to bypass the 'Find Phone' function in order to use the phone normally. Additional Analyst Notes: - CVE Program Container: References: - http://www.securit
in order to use the phone normally. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95911 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170125-01-smartphone-en
CVE ID: CVE-2017-2709 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T21:03:05.337Z Vendors: Huawei Technologies Co., Ltd. Products: HiGame, SkyTone Problem Types: DOS Description: HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, the attacker can send malformed packets to the device. Due to the lack of adequate input validation of APPs, which causes the APPs Denial of Service. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170
Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170913-01-appdos-en
CVE ID: CVE-2017-2710 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T22:46:35.371Z Vendors: Huawei Technologies Co., Ltd. Products: Beethoven-W09A, CRR-L09 Problem Types: FRP Bypass Description: BTV-W09C229B002CUSTC229D005,BTV-W09C233B029, earlier than BTV-W09C100B006CUSTC100D002 versions, earlier than BTV-W09C128B003CUSTC128D002 versions, earlier than BTV-W09C199B002CUSTC199D002 versions, earlier than BTV-W09C209B005CUSTC209D001 versions, earlier than BTV-W09C331B002CUSTC331D001 versions, earlier than CRR-L09C432B390 versions, earlier than CRR-L09C605B355CUSTC605D003 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring
9C605B355CUSTC605D003 versions have a Factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can perform some operations to update the Google account. As a result, the FRP function is bypassed. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170524-01-frp-en - http://www.securityfocus.com/bid/98712
CVE ID: CVE-2017-2711 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:06:08.187Z Vendors: Huawei Technologies Co., Ltd. Products: P9 Plus Problem Types: Input Validation Description: P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the touchscreen Driver. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to smart phone to crash the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-03-smartphone-en - http://www.securityfocus.com/bid/95663
CVE ID: CVE-2017-2712 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T17:18:28.209Z Vendors: Huawei Technologies Co., Ltd. Products: S3300 Problem Types: EFM Flapping Description: S3300 V100R006C05 have an Ethernet in the First Mile (EFM) flapping vulnerability due to the lack of type-length-value (TLV) consistency check. An attacker may craft malformed packets and send them to a device to cause EFM flapping. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95662 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170118-01-vrp-en
CVE ID: CVE-2017-2713 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:13:25.686Z Vendors: Huawei Technologies Co., Ltd. Products: HUAWEI P9 Problem Types: Insufficient Input Validation Description: HUAWEI P9 smartphones with software versions earlier before EVA-L09C432B383, versions earlier before EVA-L09C636B380, versions earlier before VIE-L09C432B370, versions earlier before VIE-L29C636B370 have an insufficient input validation vulnerability. An attacker could exploit this vulnerability to tamper with air interface signaling messages and obtain some communication information. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.co
in some communication information. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-smartphone-en
CVE ID: CVE-2017-2714 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T17:28:20.699Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Buffer Overflow Description: The GaussDB in FusionSphere OpenStack V100R005C10SPC705 and earlier versions has a buffer overflow vulnerability. An authenticated attacker on the LAN can exploit this vulnerability to execute arbitrary code or cause a denial of service (DoS) condition in the affected system. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170420-01-gaussdb-en
CVE ID: CVE-2017-2715 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T20:27:16.096Z Vendors: Huawei Technologies Co., Ltd. Products: Files &#xa3;&#xa8;Files is the smartphone APP&#xa3;&#xa9; Problem Types: Brute-force attack Description: The Files APP 7.1.1.309 and earlier versions in some Huawei mobile phones has a brute-force password cracking vulnerability due to the improper design of the Safe key database. An unauthorized attacker could access sensitive database information and may crack users' Safe passwords, leading to information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-s
tional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170425-01-files-en
CVE ID: CVE-2017-2716 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:01:35.238Z Vendors: Huawei Technologies Co., Ltd. Products: Mate 9 Problem Types: Buffer Overflow Description: The camerafs driver in Mate 9 Versions earlier than MHA-AL00BC00B173 has buffer overflow vulnerability. An attacker tricks a user into installing a malicious application which has the system privilege of the Android system and sends a specific parameter to the driver of the smart phone, causing a system crash or privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170426-02-smartphone-en
CVE ID: CVE-2017-2717 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T03:17:23.061Z Vendors: Huawei Technologies Co., Ltd. Products: honor 8 Pro Problem Types: Integer Overflow Description: honor 8 Pro with software Duke-L09C10B120 and earlier versions,Duke-L09C432B120 and earlier versions,Duke-L09C636B120 and earlier versions has an integer overflow vulnerability. The attacker sends a response message to the device, which contains an illegal length field, it could produce an integer overflow and restart the modem system. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170816-01-nas-en
CVE ID: CVE-2017-2718 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T23:50:49.849Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Command Injection Description: FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170823-01-openstack-en
CVE ID: CVE-2017-2719 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T21:58:25.063Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Command Injection Description: FusionSphere OpenStack with software V100R006C00 and V100R006C10RC2 has two command injection vulnerabilities due to the insufficient input validation on one port. An attacker can exploit the vulnerabilities to gain root privileges by sending some messages with malicious commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170823-01-openstack-en
CVE ID: CVE-2017-2720 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T18:28:20.258Z Vendors: Huawei Technologies Co., Ltd. Products: FusionSphere OpenStack Problem Types: Information Exposure Description: FusionSphere OpenStack V100R006C00 has an information exposure vulnerability. The software uses hard-coded cryptographic key to encrypt messages between certain components, which significantly increases the possibility that encrypted data may be recovered and results in information exposure. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-fusionsphere-en
CVE ID: CVE-2017-2721 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:56:17.268Z Vendors: Huawei Technologies Co., Ltd. Products: Berlin-L21,Berlin-L21HN,Berlin-L22,Berlin-L22HN,Berlin-L23,Berlin-L24HN,FRD-L02,FRD-L04,FRD-L09,FRD-L14,FRD-L19, Problem Types: FRP Bypass Description: Some Huawei smart phones with software Berlin-L21C10B130,Berlin-L21C185B133,Berlin-L21HNC10B131,Berlin-L21HNC185B140,Berlin-L21HNC432B151,Berlin-L22C636B160,Berlin-L22HNC636B130,Berlin-L22HNC675B150CUSTC675D001,Berlin-L23C605B131,Berlin-L24HNC567B110,FRD-L02C432B120,FRD-L02C635B130,FRD-L02C675B170CUSTC675D001,FRD-L04C567B162,FRD-L04C605B131,FRD-L09C10B130,FRD-L09C185B130,FRD-L09C432B131
D-L02C635B130,FRD-L02C675B170CUSTC675D001,FRD-L04C567B162,FRD-L04C605B131,FRD-L09C10B130,FRD-L09C185B130,FRD-L09C432B131,FRD-L09C636B130,FRD-L14C567B162,FRD-L19C10B130,FRD-L19C432B131,FRD-L19C636B130 have a factory Reset Protection (FRP) bypass security vulnerability. When re-configuring the mobile phone using the factory reset protection (FRP) function, an attacker can login the configuration flow by Swype Keyboard and can perform some operations to update the Google account. As a result, the FRP function is bypassed. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170920-01-frpbypass-en
CVE ID: CVE-2017-2722 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:31:02.602Z Vendors: Huawei Technologies Co., Ltd. Products: DP300,TE60,TP3106,ViewPoint 9030,eCNS210_TD,eSpace 7950,eSpace IAD,eSpace U1981 Problem Types: Input Validation Description: DP300 V500R002C00,TE60 with software V100R001C01, V100R001C10, V100R003C00, V500R002C00 and V600R006C00,TP3106 with software V100R001C06 and V100R002C00,ViewPoint 9030 with software V100R011C02, V100R011C03,eCNS210_TD with software V100R004C10,eSpace 7950 with software V200R003C00 and V200R003C30,eSpace IAD with software V300R001C07SPCa00 and V300R002C01SPCb00,eSpace U1981 with software V100R001C20, V100R001C30,
0,eSpace IAD with software V300R001C07SPCa00 and V300R002C01SPCb00,eSpace U1981 with software V100R001C20, V100R001C30, V200R003C00, V200R003C20 and V200R003C30 have an input validation vulnerability.A remote attacker may exploit this vulnerability by crafting a malformed packet and sending it to the device. A successful exploit could allow the attacker to cause a denial of service or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-pse-en
CVE ID: CVE-2017-2723 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T00:25:52.739Z Vendors: Huawei Technologies Co., Ltd. Products: Files Problem Types: Plaintext Storage Description: The Files APP 7.1.1.308 and earlier versions in some Huawei mobile phones has a vulnerability of plaintext storage of users' Safe passwords. An attacker with the root privilege of an Android system could forge the Safe to read users' plaintext Safe passwords, leading to information leak. Additional Analyst Notes: - CVE Program Container: References: - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-01-files-en
CVE ID: CVE-2017-2724 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T17:08:46.366Z Vendors: Huawei Technologies Co., Ltd. Products: P10 Plus,P10 Problem Types: Buffer Overflow Description: Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References
sing continuous system reboot or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97696 - http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-01-smartphone-en
CVE ID: CVE-2017-2725 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-17T04:19:24.346Z Vendors: Huawei Technologies Co., Ltd. Products: P10 Plus,P10 Problem Types: Buffer Overflow Description: Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References
CVE ID: CVE-2017-2726 State: PUBLISHED Published: 2017-11-22T19:00:00Z Last Updated: 2024-09-16T19:35:21.989Z Vendors: Huawei Technologies Co., Ltd. Products: P10 Plus,P10 Problem Types: Buffer Overflow Description: Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References