Description
Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-01-smartphone-en
Scores
CVSS v3
5.5
EPSS
0.0007
EPSS Percentile
21.2%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-920
Status
published
Products (7)
huawei/honor_5a_firmware
< cam-l03c605b143custc605d003
huawei/honor_8_lite_firmware
< prague-l03c605b161
huawei/mate_9_firmware
< mha-al00c00b225
huawei/mate_9_pro_firmware
< lon-al00c00b225
huawei/p10_firmware
< vtr-al00c00b167
huawei/p10_plus_firmware
< vky-al00c00b167
Huawei Technologies Co., Ltd./Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus
The versions before CAM-L03C605B143CUSTC605D003,The versions before Prague-L03C605B161,The versions
Published
Nov 22, 2017
Tracked Since
Feb 18, 2026