CVE-2017-8145
published 2017-11-22CVE-2017-8145: The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before…
medium5.5CVSS 3.0
AVLACLPRNUIRSUCNINAH
The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| huawei | p10_firmware | < vtr-al00c00b167 | vtr-al00c00b167 |
| huawei | p10_firmware | < vtr-tl00c01b167 | vtr-tl00c01b167 |
| huawei | p10_plus_firmware | < vky-al00c00b167 | vky-al00c00b167 |
| huawei | p10_plus_firmware | < vky-tl00c01b167 | vky-tl00c01b167 |