What’s Vulnerable › Vulnerabilities
CVE-2017-8144
- Severity: medium (CVSS 5.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-11-22 · updated 2026-06-17
- Weakness: CWE-920
Description
Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery.
Affected products
- Huawei Honor 5A Firmware: before cam-l03c605b143custc605d003 — fixed in cam-l03c605b143custc605d003
- Huawei Technologies Co., Ltd. Honor 8 Lite: before prague-l03c605b161; before prague-l23c605b160 — fixed in prague-l03c605b161, prague-l23c605b160
- Huawei Technologies Co., Ltd. Mate 9: before mha-al00c00b225 — fixed in mha-al00c00b225
- Huawei Technologies Co., Ltd. Mate 9 Pro: before lon-al00c00b225 — fixed in lon-al00c00b225
- Huawei Technologies Co., Ltd. P10: before vtr-al00c00b167; before vtr-tl00c01b167 — fixed in vtr-al00c00b167, vtr-tl00c01b167
- Huawei Technologies Co., Ltd. P10 Plus: before vky-al00c00b167; before vky-tl00c01b167 — fixed in vky-al00c00b167, vky-tl00c01b167
How to fix
Upgrade to a fixed version: Huawei Honor 5A Firmware cam-l03c605b143custc605d003; Huawei Technologies Co., Ltd. Honor 8 Lite prague-l03c605b161, prague-l23c605b160; Huawei Technologies Co., Ltd. Mate 9 mha-al00c00b225; Huawei Technologies Co., Ltd. Mate 9 Pro lon-al00c00b225; Huawei Technologies Co., Ltd. P10 vtr-al00c00b167, vtr-tl00c01b167; Huawei Technologies Co., Ltd. P10 Plus vky-al00c00b167, vky-tl00c01b167. Check the vendor advisory for mitigations.
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-01-smartphone-en
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-01-smartphone-en
Get alerted when CVE-2017-8144 or the next vulnerability affects your stack