Memory corruption in Huawei Mate 10
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL00B 8.0.0.334(C00) have a stack overflow vulnerability due to the lack of parameter validation. An attacker could send malicious packets to the smart phones within radio range by special wireless device, which leads stack overflow when the baseband module handles these packets. The attacker could exploit this vulnerability to perform a denial of service attack or remote code execution in baseband module.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Huawei | Mate 10 | before ALP-AL00 8.0.0.120(SP2C00) | — | No fix listed | CNA |
| Huawei | Mate 10 Pro | before BLA-AL00 8.0.0.120(SP2C00) | — | No fix listed | CNA |
| Huawei | Mate 9 | before MHA-AL00B 8.0.0.334(C00) | — | No fix listed | CNA |
| Huawei | Mate 9 Pro | before LON-AL00B 8.0.0.334(C00), | — | No fix listed | CNA |
- Mate 10 VendorHuawei Affected before ALP-AL00 8.0.0.120(SP2C00) Fixed in — No fix listed CNA
- Mate 10 Pro VendorHuawei Affected before BLA-AL00 8.0.0.120(SP2C00) Fixed in — No fix listed CNA
- Mate 9 VendorHuawei Affected before MHA-AL00B 8.0.0.334(C00) Fixed in — No fix listed CNA
- Mate 9 Pro VendorHuawei Affected before LON-AL00B 8.0.0.334(C00), Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:* | before alp-al00_8.0.0.120\(sp2c00\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:mate_10_pro_firmware:*:*:*:*:*:*:*:* | before bla-al00_8.0.0.120\(sp2c00\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:mate_10_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:* | before mha-al00b_8.0.0.334\(c00\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
| cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:* | before lon-al00b_8.0.0.334\(c00\) | Vulnerable | Huawei |
| cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Huawei |
- cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:* Versions before alp-al00_8.0.0.120\(sp2c00\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:mate_10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:mate_10_pro_firmware:*:*:*:*:*:*:*:* Versions before bla-al00_8.0.0.120\(sp2c00\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:mate_10_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:mate_9_firmware:*:*:*:*:*:*:*:* Versions before mha-al00b_8.0.0.334\(c00\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:mate_9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
- cpe:2.3:o:huawei:mate_9_pro_firmware:*:*:*:*:*:*:*:* Versions before lon-al00b_8.0.0.334\(c00\) Vulnerable ·Huawei
- cpe:2.3:h:huawei:mate_9_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-15311
- 2026-10-03 Alias added: GHSA-j9rv-r9r2-7hjg
References
More Huawei Mate 10 Firmware vulnerabilities
- TI-2018-05770 Use after free in HUAWEI Mate 10 CVSS 3.0HIGH 7.8
- TI-2017-12643 Out-of-bounds read in Huawei Mate 10 CVSS 3.0HIGH 7.8
- TI-2020-07330 There is a privilege escalation vulnerability on some Huawei smart phones due to design… CVSS 3.1MEDIUM 6.2
- TI-2019-03734 Double free in Huawei Mate 10 CVSS 3.0MEDIUM 5.5
- TI-2019-03654 Double free in Huawei Mate10 CVSS 3.0MEDIUM 5.5
- TI-2019-03649 Use after free in Huawei Mate10 CVSS 3.0MEDIUM 5.5
Sources
- CVE-2017-15311 · CVE Program
- CVE-2017-15311 · NVD
- FIRST EPSS
- GHSA-j9rv-r9r2-7hjg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences