CVEvulnerability
CVE-2017-17171
4.2 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-06-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 4.2 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 6.3 MEDIUM — AV:N/AC:M/Au:S/C:N/I:N/A:C
- Weaknesses
- CWE-20
Description
Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.
Affected configurations
• huawei mate 8 firmware (< nxt-al10c00b593)
• huawei mate 8 firmware (< nxt-cl00c92b593)
• huawei mate 8 firmware (< nxt-dl00c17b593)
• huawei mate 8 firmware (< nxt-l09c636b598a)
• huawei mate 8 firmware (< nxt-l09c185b583)
• huawei mate 8 firmware (< nxt-l09c432b582)
• huawei mate 8 firmware (< nxt-l09c605b585custc605d590)
• huawei mate 8 firmware (< nxt-l29c10b583)
• huawei mate 8 firmware (< nxt-l29c185b585)
• huawei mate 8 firmware (< nxt-l29c636b594a)
• huawei mate 8 firmware (< nxtl00c01b593)
• huawei p9 firmware (< eva-al00c00b398)
• huawei p9 firmware (< eva-al10c00b398)
• huawei p9 firmware (< eva-cl00c92b398)
• huawei p9 firmware (< eva-dl00c17b398)
• huawei p9 firmware (< eva-l09c185b391)
• huawei p9 firmware (< eva-l09c432b395)
• huawei p9 firmware (< eva-l09c464b383)
• huawei p9 firmware (< eva-l09c605b392)
• huawei p9 firmware (<= eva-l09c636b388)
• huawei p9 firmware (< eva-l19c10b394)
• huawei p9 firmware (< eva-l19c432b392)
• huawei p9 firmware (< eva-l19c605b390)
• huawei p9 firmware (< eva-l19c636b393)
• huawei p9 firmware (< eva-l29c636b389)
• huawei p9 firmware (< eva-tl00c01b398)
• huawei p9 plus firmware (< vie-l09c318b182)
• huawei p9 plus firmware (< vie-l09c432b380)
• huawei p9 plus firmware (< vie-l09c576b180)
• huawei p9 plus firmware (< vie-l29c605b370)
• huawei p9 plus firmware (< vie-l29c636b388)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone Vendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone-en Vendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone Vendor Advisory