CVE-2017-17227 describes an out-of-bounds memory access vulnerability in the GPU driver of Huawei Mate 10 smartphones running specific firmware versions. This flaw, caused by insufficient input parameter validation, allows a malicious application to trigger a phone crash or arbitrary code execution. Rated 7.8 HIGH (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), it requires user interaction to install a malicious app, but once installed, it can lead to significant impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or community discussion, indicating low current threat visibility.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< alp-l09_8.0.0.120\(c212\)CPE matchmatch criteria | cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:* | ||
< alp-l09_8.0.0.127\(c900\)CPE matchmatch criteria | cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:* | ||
< alp-l09_8.0.0.128\(402\)CPE matchmatch criteria | cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:* | ||
< alp-l09_8.0.0.128\(c02\)CPE matchmatch criteria | cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:* | ||
< alp-l09_8.0.0.128\(c109\)CPE matchmatch criteria | cpe:2.3:o:huawei:mate_10_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.