7.1

CVE-2017-17313

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Huawei ≫ P9 Lite Firmware Version < vns-l31c02b341
   Huawei ≫ P9 Lite Version-
Huawei ≫ P9 Lite Firmware Version < vns-l21c22b380
   Huawei ≫ P9 Lite Version-
Huawei ≫ P9 Lite Firmware Version < vns-l31c02b341
   Huawei ≫ P9 Lite Version-
Huawei ≫ P9 Lite Firmware Version < vns-l31c440b390
   Huawei ≫ P9 Lite Version-
Huawei ≫ P9 Lite Firmware Version < vns-l31c636b396
   Huawei ≫ P9 Lite Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.08% 0.196
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvd@nist.gov 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:N/I:N/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.