CVE-2017-8203: Huawei Nova 2 Firmware

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

The Bastet Driver of Nova 2 Plus,Nova 2 Huawei smart phones with software of Versions earlier than BAC-AL00C00B173,Versions earlier than PIC-AL00C00B173 has a use after free (UAF) vulnerability. An attacker can convince a user to install a malicious application which has a high privilege to exploit this vulnerability, Successful exploitation may cause arbitrary code execution.

Affected products

• Huawei Nova 2 Firmware: before pic-al00c00b173 (fixed in pic-al00c00b173)
• Huawei Nova 2 Plus Firmware: before bac-al00c00b173 (fixed in bac-al00c00b173)

Published 2017-11-22. Last modified 2026-06-17.