Vulnerability Details CVE-2017-17313
The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.5%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 7.1
References
Products affected by CVE-2017-17313
-
cpe:2.3:h:huawei:p9_lite:-
-
cpe:2.3:o:huawei:p9_lite_firmware:-
-
cpe:2.3:o:huawei:p9_lite_firmware:vns-l21c10b381
-
cpe:2.3:o:huawei:p9_lite_firmware:vns-l21c185
-
cpe:2.3:o:huawei:p9_lite_firmware:vns-l21c185b130
-
cpe:2.3:o:huawei:p9_lite_firmware:vns-l21c185b150
-
cpe:2.3:o:huawei:p9_lite_firmware:vns-l21c22b380
-
cpe:2.3:o:huawei:p9_lite_firmware:vns-l31c02b341
-
cpe:2.3:o:huawei:p9_lite_firmware:vns-l31c440b390