CVE-2017-17225

Description

The Near Field Communication (NFC) module in Huawei Mate 9 Pro mobile phones with the versions before LON-AL00B 8.0.0.340a(C00) has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobile phone. Successful exploit could lead to system restart or arbitrary code execution.

Risk Information

Base Score

8.8

MODERATE

Vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.058

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-17139 ,CVE-2017-17225 ,CVE-2017-17279 ,CVE-2019-5217 are affected in mate_9_pro_firmware 8.0.0.363(c00)	NCM
Vulnerabilities CVE-2017-17139 ,CVE-2017-17225 ,CVE-2017-17279 ,CVE-2019-5217 are affected in mate_9_pro_firmware 8.0.0.360(c721)	NCM
Vulnerabilities CVE-2017-17139 ,CVE-2017-17225 ,CVE-2017-17279 ,CVE-2019-5217 are affected in mate_9_pro_firmware 8.0.0.356(c00)	NCM
Vulnerabilities CVE-2017-17139 ,CVE-2017-17225 ,CVE-2017-17279 ,CVE-2019-5217 are affected in mate_9_pro_firmware 8.0.0.343(c00)	NCM
Vulnerabilities CVE-2017-17139 ,CVE-2017-17225 ,CVE-2017-17279 ,CVE-2019-5217 are affected in mate_9_pro_firmware 8.0.0.129(sp2c01)	NCM
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-17225)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234