CVE-2017-17140: Infoleak
Huawei Enjoy 5s and Y6 Pro smartphones with software the versions before TAG-AL00C92B170; the versions before TIT-L01C576B121 have an information leak vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious application on the smart phone and the application can read some sensitive information in kernel memory which may cause sensitive information leak.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2017-17140.
Which Huawei smartphones are affected by this vulnerability?
Huawei Enjoy 5s and Y6 Pro smartphones with software versions before TAG-AL00C92B170 and TIT-L01C576B121 are affected.
What is the severity of CVE-2017-17140?
The severity of CVE-2017-17140 is medium with a severity value of 5.5.
What is the cause of the information leak vulnerability?
The information leak vulnerability is caused by the lack of parameter validation in the affected Huawei smartphones.
How can I fix the information leak vulnerability?
To fix the information leak vulnerability, update the software on the affected Huawei smartphones to versions TAG-AL00C92B170 and TIT-L01C576B121 or later.