CVE-2017-17173
High
Description
Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356(C00) has an arbitrary memory free vulnerability. An attacker can tricks a user into installing a malicious application on the smart phone, and send given parameter to driver to release special kernel memory resource. Successful exploit may result in phone crash or arbitrary code execution.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHuawei Mate 9 Pro Fimware
PublishedJun 14, 2018
First seenJun 14, 2018
How to fix
Update
- huawei mate_9_pro_fimwarelon-al00b_8.0.0.356\(c00\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei mate_9_pro_fimware | v < lon-al00b_8.0.0.356\(c00\) | lon-al00b_8.0.0.356\(c00\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.