VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Nov 22, 2017· Updated May 13, 2026

CVE-2017-8175

CVE-2017-8175

Description

The Bastet of some Huawei mobile phones with software earlier than Vicky-AL00AC00B167 versions, earlier than Victoria-AL00AC00B167 versions, earlier than Warsaw-AL00C00B191 versions has an insufficient input validation vulnerability due to the lack of parameter validation. An attacker may trick a user into installing a malicious APP. The APP can modify specific parameter to cause system reboot.

Affected products

4
  • Huawei/Vicky Al00a
    cpe:2.3:a:huawei:vicky-al00a:*:*:*:*:*:*:*:*
    Range: <vicky-al00ac00b167
  • Huawei/Victoria Al00a
    cpe:2.3:a:huawei:victoria-al00a:*:*:*:*:*:*:*:*
    Range: <victoria-al00ac00b167
  • Huawei/Warsaw Al00
    cpe:2.3:a:huawei:warsaw-al00:*:*:*:*:*:*:*:*
    Range: <warsaw-al00c00b191
  • Huawei Technologies Co., Ltd./Vicky-AL00A,Victoria-AL00A,Warsaw-AL00v5
    Range: Earlier than Vicky-AL00AC00B167 versions,Earlier than Victoria-AL00AC00B167 versions,Earlier than Warsaw-AL00C00B191 versions

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.