CVE-2017-17140

MEDIUM

Huawei Enjoy 5s/Y6 Pro Firmware Info Exposure via Malicious App

Title source: llm
STIX 2.1

Description

Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an information leak vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious application on the smart phone and the application can read some sensitive information in kernel memory which may cause sensitive information leak.

References (1)

Core 1

Scores

CVSS v3 5.5
EPSS 0.0011
EPSS Percentile 28.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
huawei/enjoy_5s_firmware < tag-al00c92b170
huawei/y6_pro_firmware < tit-l01c576b121
Published Mar 05, 2018
Tracked Since Feb 18, 2026