Array Out-of-Bounds Read Vulnerability in Certain Huawei Smartphones

CVE-2017-17306 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

Some Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS-L21C703B140 have an array out-of-bounds read vulnerability. Due to the lack verification of array, an attacker tricks a user into installing a malicious application, and the application can exploit the vulnerability and make attacker to read out of bounds of array and possibly cause the device abnormal.

Learn more about our User Device Pen Test.