VYPR
High severity7.1NVD Advisory· Published Dec 22, 2017· Updated May 13, 2026

CVE-2017-15309

CVE-2017-15309

Description

Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store downloaded malicious files in an arbitrary directory.

Affected products

1
  • Huawei Technologies Co., Ltd./iReaderv5
    Range: before 8.0.2.301

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.