CVE-2017-17319

published 2018-03-20

CVE-2017-17319: Huawei P9 smartphones with the versions before EVA-AL10C00B399SP02 have an information disclosure vulnerability. The software does not properly protect certain…

Priority P4 22 medium 5.5 CVSS 3.0

AV L AC L PR N UI R S U C H I N A N

Huawei P9 smartphones with the versions before EVA-AL10C00B399SP02 have an information disclosure vulnerability. The software does not properly protect certain resource which can be accessed by multithreading. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in kernel information disclosure.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
huawei	p9_firmware	< eva-al10c00b399sp02	eva-al10c00b399sp02
huawei_technologies_co_ltd	p9	—	—

CVSS provenance

nvd v3.0 5.5 MEDIUM CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

nvd v2.0 7.1 HIGH AV:N/AC:M/Au:N/C:C/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200