Read the docs
TI-2017-12615 Aliases CVE-2017-17171GHSA-5fxj-3vg5-qmf8

Improper input validation in HUAWEI Mate 8; HUAWEI P9; HUAWEI P9 Plus

Priority LOW 20CWE-20Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and launch attacks using a pre-installed app with specific permissions. Successful exploit could allow the app to send specific parameters to the smart phone driver, which will result in system restart.

Why it matters now

EPSS 0.00474 41st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
HuaweiHUAWEI Mate 8; HUAWEI P9; HUAWEI P9 PlusHUAWEI Mate 8 Versions earlier than NXT-AL10C00B592; Versions earlier than NXT-CL00C92B592; Versions earlier than NXT-DL00C17B592; Versions earlier than NXT-L09AC636B220; Versions earlier than NXT-L09C185B582; Versions earlier than NXT-L09C432B581; Versions earlier than NXT-L09C605B585; Versions earlier than NXT-L29C10B580; Versions earlier than NXT-L29C185B582; Versions earlier than NXT-L29C636B589; Versions earlier than NXT-TL00C01B592; HUAWEI P9 Versions earlier than EVA-AL00C00B398; Versions earlier than EVA-AL10C00B398; Versions earlier than EVA-CL00C92B398; Versions earlier than EVA-DL00C17B398; Versions earlier than EVA-L09C185B391; Versions earlier than EVA-L09C432B395; Versions earlier than EVA-L09C464B383; Versions earlier than EVA-L09C605B392; Versions earlier than EVA-L09C635B391; Versions earlier than EVA-L09C636B388; Versions earlier than EVA-L19C10B394; Versions earlier than EVA-L19C432B392; Versions earlier than EVA-L19C605B390; Versions earlier than EVA-L19C636B393; Versions earlier than EVA-L29C636B389; Versions earlier than EVA-TL00C01B398; HUAWEI P9 Plus Versions earlier than VIE-L09C318B182; Versions earlier than VIE-L09C432B380; Versions earlier than VIE-L09C576B180; Versions earlier than VIE-L29C605B370; Versions earlier than VIE-L29C636B388—No fix listedCNA
  • HUAWEI Mate 8; HUAWEI P9; HUAWEI P9 Plus VendorHuawei Affected HUAWEI Mate 8 Versions earlier than NXT-AL10C00B592; Versions earlier than NXT-CL00C92B592; Versions earlier than NXT-DL00C17B592; Versions earlier than NXT-L09AC636B220; Versions earlier than NXT-L09C185B582; Versions earlier than NXT-L09C432B581; Versions earlier than NXT-L09C605B585; Versions earlier than NXT-L29C10B580; Versions earlier than NXT-L29C185B582; Versions earlier than NXT-L29C636B589; Versions earlier than NXT-TL00C01B592; HUAWEI P9 Versions earlier than EVA-AL00C00B398; Versions earlier than EVA-AL10C00B398; Versions earlier than EVA-CL00C92B398; Versions earlier than EVA-DL00C17B398; Versions earlier than EVA-L09C185B391; Versions earlier than EVA-L09C432B395; Versions earlier than EVA-L09C464B383; Versions earlier than EVA-L09C605B392; Versions earlier than EVA-L09C635B391; Versions earlier than EVA-L09C636B388; Versions earlier than EVA-L19C10B394; Versions earlier than EVA-L19C432B392; Versions earlier than EVA-L19C605B390; Versions earlier than EVA-L19C636B393; Versions earlier than EVA-L29C636B389; Versions earlier than EVA-TL00C01B398; HUAWEI P9 Plus Versions earlier than VIE-L09C318B182; Versions earlier than VIE-L09C432B380; Versions earlier than VIE-L09C576B180; Versions earlier than VIE-L29C605B370; Versions earlier than VIE-L29C636B388 Fixed in — No fix listed CNA

CPE configurations NVD · 9

CPEVersionsRoleVendor
cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*before nxt-al10c00b593VulnerableHuawei
cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:*before nxt-cl00c92b593; before nxt-dl00c17b593; before nxt-l09c636b598a; before nxt-l09c185b583; before nxt-l09c432b582; before nxt-l09c605b585custc605d590; before nxt-l29c10b583; before nxt-l29c185b585; before nxt-l29c636b594a; before nxtl00c01b593VulnerableHuawei
cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*before eva-al00c00b398VulnerableHuawei
cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:*before eva-al10c00b398; before eva-cl00c92b398; before eva-dl00c17b398; before eva-l09c185b391; before eva-l09c432b395; before eva-l09c464b383; before eva-l09c605b392; up to eva-l09c636b388; before eva-l19c10b394; before eva-l19c432b392; before eva-l19c605b390; before eva-l19c636b393; before eva-l29c636b389; before eva-tl00c01b398VulnerableHuawei
cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*before vie-l09c318b182VulnerableHuawei
cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*not specified by NVDRunning onHuawei
cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*before vie-l09c432b380; before vie-l09c576b180; before vie-l29c605b370; before vie-l29c636b388VulnerableHuawei
  • cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:* Versions before nxt-al10c00b593 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:mate_8:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:mate_8_firmware:*:*:*:*:*:*:*:* Versions before nxt-cl00c92b593; before nxt-dl00c17b593; before nxt-l09c636b598a; before nxt-l09c185b583; before nxt-l09c432b582; before nxt-l09c605b585custc605d590; before nxt-l29c10b583; before nxt-l29c185b585; before nxt-l29c636b594a; before nxtl00c01b593 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* Versions before eva-al00c00b398 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:p9:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:p9_firmware:*:*:*:*:*:*:*:* Versions before eva-al10c00b398; before eva-cl00c92b398; before eva-dl00c17b398; before eva-l09c185b391; before eva-l09c432b395; before eva-l09c464b383; before eva-l09c605b392; up to eva-l09c636b388; before eva-l19c10b394; before eva-l19c432b392; before eva-l19c605b390; before eva-l19c636b393; before eva-l29c636b389; before eva-tl00c01b398 Vulnerable ·Huawei
  • cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:* Versions before vie-l09c318b182 Vulnerable ·Huawei
  • cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
  • cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:* Versions before vie-l09c432b380; before vie-l09c576b180; before vie-l29c605b370; before vie-l29c636b388 Vulnerable ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-17171
  2. 2026-10-03 Alias added: GHSA-5fxj-3vg5-qmf8

References

Advisory 2

  • TI-2016-04530 Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before… CVSS 3.0HIGH 8.8
  • TI-2016-04531 Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before… CVSS 3.0HIGH 7.8
  • TI-2016-03116 Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182… CVSS 3.0HIGH 7.8
  • TI-2016-03115 Buffer overflow in the Wi-Fi driver in Huawei Mate 8 NXT-AL before NXT-AL10C00B182… CVSS 3.0HIGH 7.8
  • TI-2016-07239 Improper access control in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions… CVSS 3.0HIGH 7.1
  • TI-2016-07237 Improper access control in Mate 8,Mate S,P8 Versions before NXT-AL10C00B386,Versions… CVSS 3.0HIGH 7.1
See all 13 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences