High severity · published Dec 22, 2017
CVE-2017-15311
The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before…
8.8
CVSS
0.7%
EPSS
No
On KEV
Description
The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL00B 8.0.0.334(C00) have a stack overflow vulnerability due to the lack of parameter validation. An attacker could send malicious packets to the smart phones within radio range by special wireless device, which leads stack overflow when the baseband module handles these packets. The attacker could exploit this vulnerability to perform a denial of service attack or remote code execution in baseband module.
CVSS vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
M1
Mate 10 Firmware · Huawei
before alp-al00_8.0.0.120\(sp2c00\) · source: NVD
M1
Mate 10 Pro Firmware · Huawei
before bla-al00_8.0.0.120\(sp2c00\) · source: NVD
M9
Mate 9 Firmware · Huawei
before mha-al00b_8.0.0.334\(c00\) · source: NVD
M9
Mate 9 Pro Firmware · Huawei
before lon-al00b_8.0.0.334\(c00\) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-15311
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-15311
Vendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171125-01-baseband-en
More from Mate 10 Firmware
7.8
CVE-2018-7993
HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component
7.8
CVE-2017-17227
GPU driver in Huawei Mate 10 smart phones with the versions before ALP-L09 8.0.0.120(C212); The versions before ALP-L09 8.0.0.127(C900); The versions before ALP-L09…
6.2
CVE-2020-9119
There is a privilege escalation vulnerability on some Huawei smart phones due to design defects
5.5
CVE-2019-5305
The image processing module of some Huawei Mate 10 smartphones versions before ALP-L29 9.0.0.159(C185) has a memory double free vulnerability
5.5
CVE-2019-5219
There is a double free vulnerability on certain drivers of Huawei Mate10 smartphones versions earlier than ALP-AL00B 9.0.0.181(C00E87R2P20T8)