CVEvulnerability

CVE-2017-8144

5.5 MEDIUM Published 2017-11-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-11-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-920

Description

Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery.

Affected configurations

• huawei honor 5a firmware (< cam-l03c605b143custc605d003) • huawei honor 8 lite firmware (< prague-l03c605b161) • huawei honor 8 lite firmware (< prague-l23c605b160) • huawei mate 9 firmware (< mha-al00c00b225) • huawei mate 9 pro firmware (< lon-al00c00b225) • huawei p10 firmware (< vtr-al00c00b167) • huawei p10 firmware (< vtr-tl00c01b167) • huawei p10 plus firmware (< vky-al00c00b167) • huawei p10 plus firmware (< vky-tl00c01b167)

Related

Weakness · CWE (1)

  • CWE-920 Improper Restriction of Power Consumption weakness

References