Input Validation Flaw in P9 Plus Smartphones from Huawei

CVE-2017-2711

What is CVE-2017-2711?

The P9 Plus smartphones from Huawei, running software versions earlier than VIE-AL10C00B352, are susceptible to an input validation vulnerability within the touchscreen driver. This flaw enables malicious actors to potentially exploit the device by tricking users into installing harmful applications. Once compromised, the attacker can manipulate specific parameters, resulting in a system crash and compromising the phone's functionality.

References