CVE-2017-17171

Severity: medium (CVSS 4.2 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-01 · updated 2026-06-17
Weakness: CWE-20

Description

Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.

Affected products

Huawei Mate 8 Firmware: before nxt-al10c00b593; before nxt-cl00c92b593; before nxt-dl00c17b593; before nxt-l09c636b598a; before nxt-l09c185b583; before nxt-l09c432b582 — fixed in nxt-al10c00b593, nxt-cl00c92b593, nxt-dl00c17b593, nxt-l09c185b583, nxt-l09c432b582, nxt-l09c605b585custc605d590
Huawei Technologies Co., Ltd. Huawei P9: before eva-al00c00b398; before eva-al10c00b398; before eva-cl00c92b398; before eva-dl00c17b398; before eva-l09c185b391; before eva-l09c432b395 — fixed in eva-al00c00b398, eva-al10c00b398, eva-cl00c92b398, eva-dl00c17b398, eva-l09c185b391, eva-l09c432b395
Huawei Technologies Co., Ltd. P9 Plus: before vie-l09c318b182; before vie-l09c432b380; before vie-l09c576b180; before vie-l29c605b370; before vie-l29c636b388 — fixed in vie-l09c318b182, vie-l09c432b380, vie-l09c576b180, vie-l29c605b370, vie-l29c636b388

How to fix

Upgrade to a fixed version: Huawei Mate 8 Firmware nxt-al10c00b593, nxt-cl00c92b593, nxt-dl00c17b593, nxt-l09c185b583; Huawei Technologies Co., Ltd. Huawei P9 eva-al00c00b398, eva-al10c00b398, eva-cl00c92b398, eva-dl00c17b398; Huawei Technologies Co., Ltd. P9 Plus vie-l09c318b182, vie-l09c432b380, vie-l09c576b180, vie-l29c605b370. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-17171 or the next vulnerability affects your stack