CVE-2017-17313

Description

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.075

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-17313 are affected in p9_lite_firmware vns-l21c185b150	NCM
Vulnerabilities CVE-2017-17313 are affected in p9_lite_firmware vns-l21c185b130	NCM
Vulnerabilities CVE-2017-17313 are affected in p9_lite_firmware vns-l21c185	NCM
Vulnerabilities CVE-2017-17313 are affected in p9_lite_firmware vns-l21c22b380	NCM
Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2017-17313)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234