CVE-2017-17176: High severity Huawei Mate 9 Firmware vulnerability
The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlier before MHA-CL00BC00B156, versions earlier before MHA-DL00BC00B156, versions earlier before MHA-TL00BC00B156, versions earlier before LON-AL00BC00B156, versions earlier before LON-CL00BC00B156, versions earlier before LON-DL00BC00B156, versions earlier before LON-TL00BC00B156 has a arbitrary memory read/write vulnerability due to the input parameters validation. An attacker with the root privilege of the Android system could exploit this vulnerability to read and write memory data anywhere or execute arbitrary code in the TrustZone.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2017-17176.
What is the severity of CVE-2017-17176?
The severity of CVE-2017-17176 is high.
Which Huawei smartphones are affected by CVE-2017-17176?
The Mate 9 and Mate 9 Pro Huawei smartphones with versions earlier than MHA-AL00BC00B156, MHA-CL00BC00B156, MHA-DL00BC00B156, MHA-TL00BC00B156, LON-AL00BC00B156, LON-CL00BC00B156, LON-DL00BC00B156, and LON-TL00BC00B156 are affected.
What is the description of CVE-2017-17176?
The hardware security module of Mate 9 and Mate 9 Pro Huawei smartphones with versions earlier before MHA-AL00BC00B156, MHA-CL00BC00B156, MHA-DL00BC00B156, MHA-TL00BC00B156, LON-AL00BC00B156, LON-CL00BC00B156, LON-DL00BC00B156, and LON-TL00BC00B156 is vulnerable.
How do I fix CVE-2017-17176?
To fix CVE-2017-17176, update your Huawei Mate 9 and Mate 9 Pro smartphones to versions later than MHA-AL00BC00B156, MHA-CL00BC00B156, MHA-DL00BC00B156, MHA-TL00BC00B156, LON-AL00BC00B156, LON-CL00BC00B156, LON-DL00BC00B156, and LON-TL00BC00B156.