VYPR
Get started
← All advisories
High severity7.8NVD Advisory· Published Nov 22, 2017· Updated May 13, 2026

CVE-2017-8142

CVE-2017-8142

Description

The Trusted Execution Environment (TEE) module driver of Mate 9 and Mate 9 Pro smart phones with software versions earlier than MHA-AL00BC00B221 and versions earlier than LON-AL00BC00B221 has a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can start multiple threads and try to create and free specific memory, which could triggers access memory after free it and causes a system crash or arbitrary code execution.

Affected products

3
  • Huawei/Mate 9 Firmware
    cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:*
    Range: <mha-al00bc00b221
  • Huawei/Mate 9 Pro Firmware
    cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:*
    Range: <lon-al00bc00b221
  • Huawei Technologies Co., Ltd./Mate 9, Mate 9 Prov5
    Range: Versions earlier than MHA-AL00BC00B221, Versions earlier than LON-AL00BC00B221

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.