CVE-2017-17313

published 2018-04-19

CVE-2017-17313: The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than…

medium 5.5 CVSS 3.0

AV L AC L PR N UI R S U C N I N A H

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
huawei	p9_lite_firmware	< vns-l31c02b341	vns-l31c02b341
huawei	p9_lite_firmware	< vns-l21c22b380	vns-l21c22b380
huawei	p9_lite_firmware	< vns-l31c440b390	vns-l31c440b390
huawei	p9_lite_firmware	< vns-l31c636b396	vns-l31c636b396
huawei_technologies_co_ltd	huawei_p9_lite	—	—

CWE-119