Vulnerability Details CVE-2017-17227
GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120(C212); The versions before ALP-L09 8.0.0.127(C900); The versions before ALP-L09 8.0.0.128(402/C02/C109/C346/C432/C652) has a out-of-bounds memory access vulnerability due to the input parameters validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can call the driver with special parameter and cause accessing out-of-bounds memory. Successful exploit may result in phone crash or arbitrary code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.3%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 9.3
References
Products affected by CVE-2017-17227
-
cpe:2.3:h:huawei:mate_10:-
-
cpe:2.3:o:huawei:mate_10_firmware:-
-
cpe:2.3:o:huawei:mate_10_firmware:10.0.0.143(c00e143r2p4)
-
cpe:2.3:o:huawei:mate_10_firmware:10.0.0.189(c185e6r1p3)
-
cpe:2.3:o:huawei:mate_10_firmware:9.0.0.159(c432e4r1p9t8)
-
cpe:2.3:o:huawei:mate_10_firmware:9.0.0.159(c636e2r1p12t8)
-
cpe:2.3:o:huawei:mate_10_firmware:9.0.0.167(c00e85r2p20t8)
-
cpe:2.3:o:huawei:mate_10_firmware:9.0.0.177(c185e2r1p12t8)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-al00_8.0.0.120(sp2c00)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-al00_8.1.0.311
-
cpe:2.3:o:huawei:mate_10_firmware:alp-al00b_9.0.0.167(c00e85r2p20t8)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-al00b_9.0.0.181(c00e87r2p20t8)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-l09_8.0.0.120(c212)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-l09_8.0.0.127(c900)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-l09_8.0.0.128(402)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-l09_8.0.0.128(c02)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-l09_8.0.0.128(c109)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-l09_8.0.0.128(c346)
-
cpe:2.3:o:huawei:mate_10_firmware:alp-l09_8.0.0.128(c432)