{"schemaVersion":3,"id":"CVE-2017-2726","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Bastet in P10 Plus and P10 smart phones with software earlier than VKY-AL00C00B123 versions, earlier than VTR-AL00C00B123 versions have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.","dates":{"published":"2017-11-22T19:00:00.000Z","modified":"2024-09-16T19:35:21.989Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":8.4,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01351,"percentile":0.71145,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.01351},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01351,"percentile":0.71145}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01919,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01351,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01351,"percentile":0.71145}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"huawei technologies co., ltd.","product":"p10 plus,p10","name":"P10 Plus,P10","label":"p10 plus,p10","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Eariler than VKY-AL00C00B123 verisons,Earlier than VTR-AL00C00B123 versions","noFixRecorded":false,"fixedIn":null}],"versionsText":"Eariler than VKY-AL00C00B123 verisons,Earlier than VTR-AL00C00B123 versions","eol":null,"hubHref":"/vendor/huawei_technologies_co_ltd/p10_plusp10"},{"vendor":"huawei","product":"p10_firmware","name":"p10 firmware","label":"p10_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< vtr-al00c00b123","noFixRecorded":false,"fixedIn":null}],"versionsText":"< vtr-al00c00b123","eol":null,"hubHref":"/vendor/huawei/p10"},{"vendor":"huawei","product":"p10_plus_firmware","name":"p10 plus firmware","label":"p10_plus_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< vky-al00c00b123","noFixRecorded":false,"fixedIn":null}],"versionsText":"< vky-al00c00b123","eol":null,"hubHref":"/vendor/huawei/p10_plus"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/97696","label":"www.securityfocus.com/bid/97696","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-01-smartphone-en","label":"www.huawei.com/en/psirt/security-advisories/huawei-sa-20170405-01-smartphone-en","hostname":"www.huawei.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-11-22T19:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-16T19:35:21.989Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T20:32:55.502Z","stale":false,"partial":false}}