What’s Vulnerable › Vulnerabilities

CVE-2017-17319

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-20 · updated 2026-06-17
• Weakness: CWE-200

Description

Huawei P9 smartphones with the versions before EVA-AL10C00B399SP02 have an information disclosure vulnerability. The software does not properly protect certain resource which can be accessed by multithreading. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could result in kernel information disclosure.

Affected products

• Huawei Technologies Co., Ltd. Huawei P9: before eva-al10c00b399sp02 — fixed in eva-al10c00b399sp02

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. Huawei P9 eva-al10c00b399sp02. Check the vendor advisory for mitigations.

References

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-smartphone-en
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180314-01-smartphone-en

Get alerted when CVE-2017-17319 or the next vulnerability affects your stack