CVE-2017-8183

Published: Nov 22, 2017Modified: May 13, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage.

Affected (2)

Products: Huawei: Mtk Platform Smart Phone Firmware

1 product

Mtk Platform Smart Phone Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Huawei Mtk Platform Smart Phone Firmware	Before nice-al10c00b140

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Huawei Mtk Platform Smart Phone Firmware	Before nice-al00c00b160

Running on/with	Platform Versions
Huawei Mtk Platform Smart Phone	All versions

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en

Source: psirt@huawei.com

Vendor Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-en

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.