CVE-2017-8182

Published: Nov 22, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Exploitability: 1.8 / Impact: 4.2

Source: NVD

Description

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a out-of-bound read vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter and cause to memory out-of-bound read.

Affected (2)

Products: Huawei: Mtk Platform Smart Phone Firmware

1 product

Mtk Platform Smart Phone Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Mtk Platform Smart Phone Firmware	Before nice-al10c00b140

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mtk Platform Smart Phone Firmware	Before nice-al00c00b160

Running on/with	Platform Versions
Huawei Mtk Platform Smart Phone	All versions

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.