CVE-2017-8145
MEDIUMHuawei P10 and P10 Plus - Denial of Service via Malicious Application Call Module Parameter
Title source: llmDescription
The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-02-smartphone-en
Scores
CVSS v3
5.5
EPSS
0.0008
EPSS Percentile
22.8%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-20
Status
published
Products (3)
huawei/p10_firmware
< vtr-al00c00b167
huawei/p10_plus_firmware
< vky-al00c00b167
Huawei Technologies Co., Ltd./P10, P10 Plus
The versions before VTR-AL00C00B167, The versions before VTR-TL00C01B167, The versions before VKY-AL
Published
Nov 22, 2017
Tracked Since
Feb 18, 2026