MEDIUM
Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters
Published Jun 1, 2018
4.2
MEDIUMCVSS 3.0
EPSS 0.47%
Description
Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.
Affected products
-
- Version HUAWEI Mate 8 Versions earlier than NXT-AL10C00B592StatusaffectedConstraints-
- Version HUAWEI P9 Plus Versions earlier than VIE-L09C318B182StatusaffectedConstraints-
- Version HUAWEI P9 Versions earlier than EVA-AL00C00B398StatusaffectedConstraints-
- Version Versions earlier than EVA-AL10C00B398StatusaffectedConstraints-
- Version Versions earlier than EVA-CL00C92B398StatusaffectedConstraints-
- Version Versions earlier than EVA-DL00C17B398StatusaffectedConstraints-
- Version Versions earlier than EVA-L09C185B391StatusaffectedConstraints-
- Version Versions earlier than EVA-L09C432B395StatusaffectedConstraints-
- Version Versions earlier than EVA-L09C464B383StatusaffectedConstraints-
- Version Versions earlier than EVA-L09C605B392StatusaffectedConstraints-
- Version Versions earlier than EVA-L09C635B391StatusaffectedConstraints-
- Version Versions earlier than EVA-L09C636B388StatusaffectedConstraints-
- Version Versions earlier than EVA-L19C10B394StatusaffectedConstraints-
- Version Versions earlier than EVA-L19C432B392StatusaffectedConstraints-
- Version Versions earlier than EVA-L19C605B390StatusaffectedConstraints-
- Version Versions earlier than EVA-L19C636B393StatusaffectedConstraints-
- Version Versions earlier than EVA-L29C636B389StatusaffectedConstraints-
- Version Versions earlier than EVA-TL00C01B398StatusaffectedConstraints-
- Version Versions earlier than NXT-CL00C92B592StatusaffectedConstraints-
- Version Versions earlier than NXT-DL00C17B592StatusaffectedConstraints-
- Version Versions earlier than NXT-L09AC636B220StatusaffectedConstraints-
- Version Versions earlier than NXT-L09C185B582StatusaffectedConstraints-
- Version Versions earlier than NXT-L09C432B581StatusaffectedConstraints-
- Version Versions earlier than NXT-L09C605B585StatusaffectedConstraints-
- Version Versions earlier than NXT-L29C10B580StatusaffectedConstraints-
- Version Versions earlier than NXT-L29C185B582StatusaffectedConstraints-
- Version Versions earlier than NXT-L29C636B589StatusaffectedConstraints-
- Version Versions earlier than NXT-TL00C01B592StatusaffectedConstraints-
- Version Versions earlier than VIE-L09C432B380StatusaffectedConstraints-
- Version Versions earlier than VIE-L09C576B180StatusaffectedConstraints-
- Version Versions earlier than VIE-L29C605B370StatusaffectedConstraints-
- Version Versions earlier than VIE-L29C636B388StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Huawei Technologies Co., Ltd. | HUAWEI Mate 8; HUAWEI P9; HUAWEI P9 Plus | n/a |
|
Configuration 1
AND
- < nxt-al10c00b593
Configuration 2
AND
- < nxt-cl00c92b593
Configuration 3
AND
- < nxt-dl00c17b593
Configuration 4
AND
- < nxt-l09c636b598a
Configuration 5
AND
- < nxt-l09c185b583
Configuration 6
AND
- < nxt-l09c432b582
Configuration 7
AND
- < nxt-l09c605b585custc605d590
Configuration 8
AND
- < nxt-l29c10b583
Configuration 9
AND
- < nxt-l29c185b585
Configuration 10
AND
- < nxt-l29c636b594a
Configuration 11
AND
- < nxtl00c01b593
Configuration 12
AND
- < eva-al00c00b398
Configuration 13
AND
- < eva-al10c00b398
Configuration 14
AND
- < eva-cl00c92b398
Configuration 15
AND
- < eva-dl00c17b398
Configuration 16
AND
- < eva-l09c185b391
Configuration 17
AND
- < eva-l09c432b395
Configuration 18
AND
- < eva-l09c464b383
Configuration 19
AND
- < eva-l09c605b392
Configuration 20
AND
- ≤ eva-l09c636b388
Configuration 21
AND
- < eva-l19c10b394
Configuration 22
AND
- < eva-l19c432b392
Configuration 23
AND
- < eva-l19c605b390
Configuration 24
AND
- < eva-l19c636b393
Configuration 25
AND
- < eva-l29c636b389
Configuration 26
AND
- < eva-tl00c01b398
Configuration 27
AND
- < vie-l09c318b182
Configuration 28
AND
- < vie-l09c432b380
Configuration 29
AND
- < vie-l09c576b180
Configuration 30
AND
- < vie-l29c605b370
Configuration 31
AND
- < vie-l29c636b388
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
4.2 MEDIUM NVD
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required High
User Interaction Required
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
6.3 MEDIUM NVD
AV:N/AC:M/Au:S/C:N/I:N/A:C
Access Vector Network
Access Complexity Medium
Authentication Single
Confidentiality Impact None
Integrity Impact None
Availability Impact Complete
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
0.47% 0.00474
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.00474
Score over time
2021–2026- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
Percentile over time
- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
Table of values (9 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.47% (0.00474) | 38.69th | v5 (v2026.06.15) |
| Sep 20, 2026 | 0.47% (0.00474) | 40.15th | v5 (v2026.06.15) |
| Jul 20, 2024 | 0.04% (0.00044) | 12.95th | v3 (v2023.03.01) |
| May 25, 2024 | 0.04% (0.00044) | 12.27th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.04% (0.00044) | 10.26th | v3 (v2023.03.01) |
| Mar 6, 2023 | 0.89% (0.00885) | 27.89th | v2 (v2022.01.01) |
| Feb 4, 2022 | 0.89% (0.00885) | 10.50th | v2 (v2022.01.01) |
| Feb 3, 2022 | 0.52% (0.00518) | 11.68th | v5 (v2026.06.15) |
| Apr 14, 2021 | 0.52% (0.00518) | 0.00th | v1 |
Weaknesses (1)
References (2)
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone x_refsource_CONFIRMVendor Advisory
- https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone-en Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone | x_refsource_CONFIRMVendor Advisory | |
| https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180530-01-smartphone-en | Vendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner huawei
Published Jun 1, 2018
Updated Aug 5, 2024
Reserved Dec 4, 2017
Link CVE-2017-17171
CISA Vulnrichment
Updated n/a