TI-2017-12687 Aliases CVE-2017-17313 GHSA-q6fp-67fw-rwjh

Memory corruption in HUAWEI P9 Lite

LOW 26CWE-119Published 2018-04-19 · Updated 2024-09-16

Key facts

Attack vector: Local
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and the APP may sends specific data to the inputhub driver to exploit this vulnerability, successful exploit could cause the system reboot.

Why it matters now

EPSS 0.00547 46th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Huawei	HUAWEI P9 Lite	Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396	—	No fix listed	CNA

HUAWEI P9 Lite VendorHuawei Affected Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Versions earlier than VNS-L31C02B341, Versions earlier than VNS-L31C440B390, Versions earlier than VNS-L31C636B396 Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:o:huawei:p9_lite_firmware::::::::	before vns-l31c02b341	Vulnerable	Huawei
cpe:2.3:h:huawei:p9_lite:-:::::::*	not specified by NVD	Running on	Huawei
cpe:2.3:o:huawei:p9_lite_firmware::::::::	before vns-l21c22b380; before vns-l31c440b390; before vns-l31c636b396	Vulnerable	Huawei

cpe:2.3:o:huawei:p9_lite_firmware:*:*:*:*:*:*:*:* Versions before vns-l31c02b341 Vulnerable ·Huawei
cpe:2.3:h:huawei:p9_lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Huawei
cpe:2.3:o:huawei:p9_lite_firmware:*:*:*:*:*:*:*:* Versions before vns-l21c22b380; before vns-l31c440b390; before vns-l31c636b396 Vulnerable ·Huawei

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2017-17313
2026-10-03 Alias added: GHSA-q6fp-67fw-rwjh

References

Advisory 1

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180418-02-smartphone-en

TI-2017-01939 The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier… CVSS 3.0HIGH 7.8
TI-2016-07218 The TrustZone driver in Huawei P9 phones with software Versions earlier than… CVSS 3.0HIGH 7.8
TI-2016-07219 Improper input validation in P9,P9 Lite,P8 Lite Versions earlier than… CVSS 3.0MEDIUM 6.4
TI-2017-05718 Improper input validation in Huawei Honor 5C, P9 Lite CVSS 3.0MEDIUM 5.5
TI-2016-07217 Improper input validation in P9,P9 Lite,P8 Lite Versions earlier than… CVSS 3.0MEDIUM 5.0
TI-2016-07225 Improper authorization in P9, P9 Lite… CVSS 3.0MEDIUM 4.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences