CVE-2017-17227
First published: Fri Mar 09 2018(Updated: )
GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120(C212); The versions before ALP-L09 8.0.0.127(C900); The versions before ALP-L09 8.0.0.128(402/C02/C109/C346/C432/C652) has a out-of-bounds memory access vulnerability due to the input parameters validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can call the driver with special parameter and cause accessing out-of-bounds memory. Successful exploit may result in phone crash or arbitrary code execution.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Mate 10 Firmware | <alp-l09_8.0.0.120\(c212\) | |
| Huawei Mate 10 | ||
| Huawei Mate 10 Firmware | <alp-l09_8.0.0.127\(c900\) | |
| Huawei Mate 10 Firmware | <alp-l09_8.0.0.128\(402\) | |
| Huawei Mate 10 Firmware | <alp-l09_8.0.0.128\(c02\) | |
| Huawei Mate 10 Firmware | <alp-l09_8.0.0.128\(c109\) | |
| Huawei Mate 10 Firmware | <alp-l09_8.0.0.128\(c346\) | |
| Huawei Mate 10 Firmware | <alp-l09_8.0.0.128\(c432\) | |
| Huawei Mate 10 Firmware | <alp-l09_8.0.0.128\(c652\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-17227?
CVE-2017-17227 is a vulnerability in the GPU driver in Huawei Mate 10 smartphones.
What is the severity of CVE-2017-17227?
CVE-2017-17227 has a severity rating of 7.8, which is classified as critical.
How does CVE-2017-17227 affect Huawei Mate 10 smartphones?
CVE-2017-17227 affects Huawei Mate 10 smartphones with versions before ALP-L09 8.0.0.120(C212), ALP-L09 8.0.0.127(C900), and ALP-L09 8.0.0.128(402/C02/C109/C346/C432/C652).
What is the vulnerability in CVE-2017-17227?
CVE-2017-17227 is an out-of-bounds memory access vulnerability in the GPU driver of Huawei Mate 10 smartphones.
Is there a fix for CVE-2017-17227?
Huawei has released a security advisory with a fix for CVE-2017-17227. Please refer to the official Huawei website for more information.
- collector/nvd-index
- vendor/huawei
- canonical/huawei mate 10 firmware
- canonical/huawei mate 10