CVE-2017-17313

CWE-119 — Buffer Overflow3 documents3 sources

Severity

5.5MEDIUM

EPSS

0.1%

top 77.47%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei P9 Lite Firmware Huawei Technologies Co., Ltd. Huawei P9 Lite

Timeline

PublishedApr 19

Latest updateMay 14

Description

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could ca…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDhuawei/p9_lite_firmware< vns-l31c02b341+3

▶CVEListV5huawei_technologies_co.,_ltd./huawei_p9_liteVersions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396

🔴Vulnerability Details

GHSA

GHSA-q6fp-67fw-rwjh: The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier↗2022-05-14

▶

CVEList

CVE-2017-17313: The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier↗2018-04-19

▶