CVE-2017-17328

Description

Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application, successful exploit could cause information disclosure.

Affected products

• Huawei Technologies Co., Ltd. / MHA-AL00AMHA-AL00AC00B125 – MHA-AL00AC00B125

References

• VENDOR_ADVISORYhttp://www.huawei.com/en/psirt/security-advisories/2017/huawei-sa-20171220-01-smartphone-en