CVE-2018-7899

Published Apr 19, 2018

Last updated 3 days ago

CVSS medium 5.5

Overview

Description: The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105(C00), 8.0.0.111(C00), 8.0.0.112D(C00), 8.0.0.116(C00), 8.0.0.119(C00), 8.0.0.119D(C00), 8.0.0.122(C00), 8.0.0.132(C00), 8.0.0.132D(C00), 8.0.0.142(C00), 8.0.0.151(C00), Berkeley-BD 1.0.0.21, 1.0.0.22, 1.0.0.23, 1.0.0.24, 1.0.0.26, 1.0.0.29 has a double free vulnerability. An attacker can trick a user to install a malicious application and exploit this vulnerability when in the exception handling process. Successful exploitation may cause system reboot.
Source: psirt@huawei.com
NVD status: Modified

Risk scores

CVSS 3.0

Type: Primary
Base score: 5.5
Impact score: 3.6
Exploitability score: 1.8
Vector string: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 7.1
Impact score: 6.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: CWE-415

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.105\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B38C8ECB-CAF7-4915-92D4-9E4298451865"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.111\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0ADCBBF8-EE49-45ED-A18D-B999BBAA7098"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.112d\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BE07B703-FD85-4112-B4D1-2ECE7A853132"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.116\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "3149EB4B-C8C9-47B5-8464-6D9523873B39"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.119\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B93A71E7-5D00-4376-B597-BDA834D510E6"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.119d\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6D0167C7-2521-4C29-9B07-72C8945AF17F"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.122\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "35A82803-39F2-4F9E-BC7C-3A5BC34A3909"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.132\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CB4653FE-6E5C-4013-836B-AA1F578A4377"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.132d\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD5CC159-7D45-4104-8D06-751465506C85"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.142\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5A98094E-AB82-4FE6-8ADB-54B05D14B96F"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-al20_firmware:8.0.0.151\\(c00\\):*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E8DD5A68-091C-4997-88A0-E520EE5FFC2C"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:berkeley-al20:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "C219B9CA-00AE-4B6B-A1BE-63AF154F1E50"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-bd_firmware:1.0.0.21:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A181BC26-9B15-4BD1-B095-6B7B1EA51957"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-bd_firmware:1.0.0.22:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F6EBEAF0-0E26-4634-93A3-83D1F3BBC07E"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-bd_firmware:1.0.0.23:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0F154A4D-B3F7-4E81-86F9-31B215D8BC69"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-bd_firmware:1.0.0.24:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0A0D695E-77FB-4470-80B2-131DF3A8AD76"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-bd_firmware:1.0.0.26:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "87897EA8-352C-466D-9925-0833A1CD7C87"
          },
          {
            "criteria": "cpe:2.3:o:huawei:berkeley-bd_firmware:1.0.0.29:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C71BD4B6-429D-4EB0-90C1-2B50260D6E6D"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:huawei:berkeley-bd:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "B1F072BA-1332-4B81-ADD5-1BBB85E9B557"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Social media

Configurations

References