CVE-2017-17176
First published: Wed Oct 17 2018(Updated: )
The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156, versions earlier before LON-CL00BC00B156, versions earlier before LON-DL00BC00B156, versions earlier before LON-TL00BC00B156 has a arbitrary memory read/write vulnerability due to the input parameters validation. An attacker with the root privilege of the Android system could exploit this vulnerability to read and write memory data anywhere or execute arbitrary code in the TrustZone.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Mate 9 Firmware | <mha-al00bc00b156 | |
| Huawei Mate 9 | ||
| Huawei Mate 9 Firmware | <mha-cl00bc00b156 | |
| Huawei Mate 9 Firmware | <mha-dl00bc00b156 | |
| Huawei Mate 9 Firmware | <mha-tl00bc00b156 | |
| Huawei Mate 9 Pro Firmware | <lon-al00bc00b156 | |
| Huawei Mate 9 Pro | ||
| Huawei Mate 9 Pro Firmware | <lon-cl00bc00b156 | |
| Huawei Mate 9 Pro Firmware | <lon-dl00bc00b156 | |
| Huawei Mate 9 Pro Firmware | <lon-tl00bc00b156 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2017-17176.
What is the severity of CVE-2017-17176?
The severity of CVE-2017-17176 is high.
Which Huawei smartphones are affected by CVE-2017-17176?
The Mate 9 and Mate 9 Pro Huawei smartphones with versions earlier than MHA-AL00BC00B156, MHA-CL00BC00B156, MHA-DL00BC00B156, MHA-TL00BC00B156, LON-AL00BC00B156, LON-CL00BC00B156, LON-DL00BC00B156, and LON-TL00BC00B156 are affected.
What is the description of CVE-2017-17176?
The hardware security module of Mate 9 and Mate 9 Pro Huawei smartphones with versions earlier before MHA-AL00BC00B156, MHA-CL00BC00B156, MHA-DL00BC00B156, MHA-TL00BC00B156, LON-AL00BC00B156, LON-CL00BC00B156, LON-DL00BC00B156, and LON-TL00BC00B156 is vulnerable.
How do I fix CVE-2017-17176?
To fix CVE-2017-17176, update your Huawei Mate 9 and Mate 9 Pro smartphones to versions later than MHA-AL00BC00B156, MHA-CL00BC00B156, MHA-DL00BC00B156, MHA-TL00BC00B156, LON-AL00BC00B156, LON-CL00BC00B156, LON-DL00BC00B156, and LON-TL00BC00B156.
- agent/author
- agent/description
- agent/event
- agent/references
- agent/severity
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- vendor/huawei
- canonical/huawei mate 9 firmware
- canonical/huawei mate 9
- canonical/huawei mate 9 pro firmware
- canonical/huawei mate 9 pro