CVE-2017-8146

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-11-22 · updated 2026-06-17
Weakness: CWE-20

Description

The call module of P10 and P10 Plus smartphones with software versions before VTR-AL00C00B167, versions before VTR-TL00C01B167, versions before VKY-AL00C00B167, versions before VKY-TL00C01B167 has a DoS vulnerability. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process.

Affected products

Huawei Technologies Co., Ltd. P10: before vtr-al00c00b167; before vtr-tl00c01b167 — fixed in vtr-al00c00b167, vtr-tl00c01b167
Huawei Technologies Co., Ltd. P10 Plus: before vky-al00c00b167; before vky-tl00c01b167 — fixed in vky-al00c00b167, vky-tl00c01b167

How to fix

Upgrade to a fixed version: Huawei Technologies Co., Ltd. P10 vtr-al00c00b167, vtr-tl00c01b167; Huawei Technologies Co., Ltd. P10 Plus vky-al00c00b167, vky-tl00c01b167. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2017-8146 or the next vulnerability affects your stack