CVE-2017-17139

MEDIUM

Huawei Mate 9 <MHA-AL00B 8.0.0.334(C00) - Info Disclosure

Title source: llm
STIX 2.1

Description

Huawei Mate 9 and Mate 9 pro smart phones with software the versions before MHA-AL00B 8.0.0.334(C00); the versions before LON-AL00B 8.0.0.334(C00) have a information leak vulnerability in the date service proxy implementation. An attacker may trick a user into installing a malicious application and application can exploit the vulnerability to get kernel date which may cause sensitive information leak.

References (1)

Core 1

Scores

CVSS v3 5.5
EPSS 0.0011
EPSS Percentile 28.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
huawei/mate_9_firmware < mha-al00b_8.0.0.334\(c00\)
huawei/mate_9_pro_firmware < lon-al00b_8.0.0.334\(c00\)
Published Mar 05, 2018
Tracked Since Feb 18, 2026