Out-of-Bounds Read Vulnerability in Huawei Smartphones

CVE-2017-17307

What is CVE-2017-17307?

Huawei smartphones running the software version VNS-L21AUTC555B141 are susceptible to an out-of-bounds read vulnerability. This issue arises from the absence of a proper string terminator, allowing attackers to deceive users into installing malicious applications. Once executed, these applications can exploit the vulnerability to access memory outside the intended boundaries, potentially leading to abnormal device behavior and unauthorized data exposure.

References