medium5.5
CVE-2017-17306
Some Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS-L21C703B140 have an array out-of-bounds read vulnerability.
Impact
Some Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS-L21C703B140 have an array out-of-bounds read vulnerability. Due to the lack verification of array, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds of array and possibly cause the device abnormal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Vns-L21 Firmware | Versions vns-l21autc555b141, vns-l21c10b160, vns-l21c66b160, vns-l21c703b140 |