Information disclosure in Huawei Nice-AL00
Priority LOW 26CWE-200Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage.
Why it matters now
EPSS 0.00645 51st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | Nice-AL00 | Earlier than Nice-AL00C00B160 versions, Earlier than Nice-AL10C00B140 versions | — | No fix listed | CNA |
- Nice-AL00 VendorHuawei Affected Earlier than Nice-AL00C00B160 versions, Earlier than Nice-AL10C00B140 versions Fixed in — No fix listed CNA
CPE configurations NVD · 3
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:* | before nice-al10c00b140 | Vulnerable | Huawei |
| cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:* | before nice-al00c00b160 | Vulnerable | Huawei |
- cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:* Versions before nice-al10c00b140 Vulnerable ·Huawei
- cpe:2.3:h:huawei:mtk_platform_smart_phone:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:mtk_platform_smart_phone_firmware:*:*:*:*:*:*:*:* Versions before nice-al00c00b160 Vulnerable ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-8183
- 2026-10-03 Alias added: GHSA-2wg8-j75p-4mrm
- 2026-10-20 EPSS moved to the 50th–90th percentile
References
More Huawei Mtk Platform Smart Phone Firmware vulnerabilities
- TI-2017-05754 Memory corruption in Huawei Nice-AL00 CVSS 3.0HIGH 7.8
- TI-2017-05756 Memory corruption in Huawei Nice-AL00 CVSS 3.0HIGH 7.8
- TI-2017-05755 Memory corruption in Huawei Nice-AL00 CVSS 3.0HIGH 7.8
- TI-2017-05757 Out-of-bounds read in Huawei Nice-AL00 CVSS 3.0MEDIUM 6.1
- TI-2017-05759 Memory corruption in Huawei Nice-AL00 CVSS 3.0MEDIUM 5.5
Sources
- CVE-2017-8183 · CVE Program
- CVE-2017-8183 · NVD
- FIRST EPSS
- GHSA-2wg8-j75p-4mrm · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences