Home

CVE-2017-8141

Description

The Touch Panel (TP) driver in P10 Plus smart phones with software versions earlier than VKY-AL00C00B153 has a memory double free vulnerability. An attacker with the root privilege of the Android system tricks a user into installing a malicious application, and the application can start multiple threads and try to free specific memory, which could triggers double free and causes a system crash or arbitrary code execution.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.114

Associated Vulnerability

VulnerabilityOS Platform
Vulnerabilities CVE-2017-8141 ,CVE-2017-8172 are affected in p10_plus_firmware vky-al00c00b123NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8172 are affected in p10_plus_firmware vicky-l29ac605b162NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8172 are affected in p10_plus_firmware vicky-al00ac00b172dNCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware vicky-al00ac00b172NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware 9.1.0.255(c576e6r1p8t8)NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware 9.1.0.252(c432e4r1p9t8)NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware 9.1.0.252(c185e2r1p9t8)NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware 9.1.0.201(c01e75r1p12t8)NCM
Vulnerabilities CVE-2017-8141 ,CVE-2017-8171 ,CVE-2017-8172 are affected in p10_plus_firmware 8.0.0.357(c00)NCM
Double Free Vulnerability (CVE-2017-8141)NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234