What’s Vulnerable › Vulnerabilities

CVE-2017-17320

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-20 · updated 2026-06-17
• Weakness: CWE-415

Description

Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188 have a memory double free vulnerability. The system does not manage the memory properly, that frees on the same memory address twice. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in malicious code execution.

Affected products

• Huawei Technologies Co., Ltd. Mate 9 Pro: lon-al00bc00b139d, lon-al00bc00b229, lon-l29dc721b188

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-02-smartphone-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-02-smartphone-en

Get alerted when CVE-2017-17320 or the next vulnerability affects your stack