CVE-2017-17172

Severity: high (CVSS 7.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-14 · updated 2026-06-17
Weakness: CWE-755

Description

Huawei smart phones LYO-L21 with software LYO-L21C479B107, LYO-L21C479B107 have a privilege escalation vulnerability. An authenticated, local attacker can crafts malformed packets after tricking a user to install a malicious application and exploit this vulnerability when in the exception handling process. Successful exploitation may cause the attacker to obtain a higher privilege of the smart phones.

Affected products

Huawei Technologies Co., Ltd. LYO-L21: all versions

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180613-01-smartphone-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180613-01-smartphone-en

Get alerted when CVE-2017-17172 or the next vulnerability affects your stack