CVE-2017-17313

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot.

Score

CVSS 3.0 5.5 Medium

Status

Modified - psirt@huawei.com

Published

2018-04-19

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• P9 Lite Firmware (Huawei)
• Huawei P9 Lite (Huawei Technologies Co. Ltd.)

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en