CVE-2017-15347

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-15 · updated 2026-06-17
Weakness: CWE-416

Description

Huawei Mate 9 Pro mobile phones with software of versions earlier than LON-AL00BC00B235 have a use after free (UAF) vulnerability. An attacker tricks a user into installing a malicious application, and the application can riggers access memory after free it. A local attacker may exploit this vulnerability to cause the mobile phone to crash.

Affected products

Huawei Technologies Co., Ltd. Mate 9 Pro: lon-al00bc00b235

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-phone-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171129-01-phone-en

Get alerted when CVE-2017-15347 or the next vulnerability affects your stack