CVE-2017-8172

MEDIUM

Huawei P10 and P10 Plus Firmware < VKY-AL00C00B157, < VTR-AL00C00B157 - Denial of Service via Isub Service Array Index

Title source: llm
STIX 2.1

Description

Isub service in P10 Plus and P10 smart phones with earlier than VKY-AL00C00B157 versions and earlier than VTR-AL00C00B157 versions has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a out-of-bounds array access that results in smart phone restart.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99370

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 19.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE
CWE-129
Status published
Products (3)
huawei/p10_firmware < vtr-al00c00b157
huawei/p10_plus_firmware < vky-al00c00b157
Huawei Technologies Co., Ltd./P10 Plus,P10 Earlier than VKY-AL00C00B157 versions, Earlier than VTR-AL00C00B157 versions
Published Nov 22, 2017
Tracked Since Feb 18, 2026