← Back

CVE-2017-8145

nvd nist
Published: Nov 22, 2017Modified: May 13, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process.

Affected (4)

Huawei
2 products
P10 Firmware
P10 Plus Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
P10 Firmware
Before vtr-al00c00b167
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
P10 Plus Firmware
Before vky-al00c00b167
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
P10 Firmware
Before vtr-tl00c01b167
Running on/withPlatform Versions
Huawei
P10
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
P10 Plus Firmware
Before vky-tl00c01b167
Running on/withPlatform Versions
Huawei
P10 Plus
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: psirt@huawei.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.