CVE-2017-17313: The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than…

PriorityP421medium5.5CVSS 3.0

AVLACLPRNUIRSUCNINAH

EPSS

0.56%

42.6th percentile

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
huawei	p9_lite_firmware	< vns-l31c02b341	vns-l31c02b341
huawei	p9_lite_firmware	< vns-l21c22b380	vns-l21c22b380
huawei	p9_lite_firmware	< vns-l31c440b390	vns-l31c440b390
huawei	p9_lite_firmware	< vns-l31c636b396	vns-l31c636b396
huawei_technologies_co_ltd	huawei_p9_lite	—	—

CVSS provenance

nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.