CVE-2017-17313

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-04-19 · updated 2026-06-17
Weakness: CWE-119

Description

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot.

Affected products

Huawei Technologies Co., Ltd. HUAWEI P9 Lite: before vns-l31c02b341; before vns-l21c22b380; before vns-l31c440b390; before vns-l31c636b396 — fixed in vns-l21c22b380, vns-l31c02b341, vns-l31c440b390, vns-l31c636b396

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. HUAWEI P9 Lite vns-l21c22b380, vns-l31c02b341, vns-l31c440b390, vns-l31c636b396. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-17313 or the next vulnerability affects your stack