CVE-2017-17324

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-09 · updated 2026-06-17
Weakness: CWE-190

Description

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit could cause malicious code execution.

Affected products

Huawei Technologies Co., Ltd. Mate 9 Pro: lon-al00bc00b139d, lon-al00bc00b229

References

http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180124-01-smartphone-en
http://www.huawei.com/en/psirt/security-advisories/2018/huawei-sa-20180124-01-smartphone-en

Get alerted when CVE-2017-17324 or the next vulnerability affects your stack