The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot.
References
| Link | Resource |
|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en | Vendor Advisory |
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
History
21 Nov 2024, 03:17
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en - Vendor Advisory |
Information
Published : 2018-04-19 14:29
Updated : 2024-11-21 03:17
NVD link : CVE-2017-17313
Mitre link : CVE-2017-17313
CVE.ORG link : CVE-2017-17313
JSON object : View
Products Affected
huawei
- p9_lite_firmware
- p9_lite
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer