CVE-2017-8172

Name of the Vulnerable Software and Affected Versions Huawei P10 Plus and P10 smartphones with versions earlier than VKY-AL00C00B157 Huawei P10 smartphones with versions earlier than VTR-AL00C00B157

Description The issue is related to a denial of service (DoS) vulnerability in the Isub service. An attacker can trick a user into installing a malicious application, which can send a given parameter to a specific interface. This results in an out-of-bounds array access, causing the smartphone to restart.

Recommendations For versions earlier than VKY-AL00C00B157 of Huawei P10 Plus, update to version VKY-AL00C00B157 or later. For versions earlier than VTR-AL00C00B157 of Huawei P10, update to version VTR-AL00C00B157 or later.