Buffer Overflow Vulnerability in Huawei Mate 9 Pro's NFC Module
CVE-2017-17225

8.8HIGH

Key Information:

Vendor

McAfee
Status
Mate 9 Pro
Vendor
CVE Published:
9 March 2018

What is CVE-2017-17225?

The NFC module in Huawei Mate 9 Pro devices released before version LON-AL00B 8.0.0.340a(C00) is susceptible to a buffer overflow vulnerability caused by inadequate input validation. An attacker leveraging this flaw can exploit NFC functionalities using a malicious card reader or similar device. The exploitation could result in a system restart or allow the execution of arbitrary code on the affected device, posing risks to user security and privacy. For further information and security advice, please refer to Huawei's official advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Mate 9 Pro The versions before LON-AL00B 8.0.0.340a(C00)

References

http://www.huawei.com/en/psirt/security-advisories/2018/h...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.