CVE-2017-17285

2018-02-1516:00:00

huawei

www.cve.org

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.7%

JSON

Bluetooth module in some Huawei mobile phones with software LON-AL00BC00B229 and earlier versions has a buffer overflow vulnerability. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth AVDTP/AVCTP messages after successful paring, causing buffer overflow. Successful exploit may cause code execution.

CNA Affected

[
  {
    "product": "LON-AL00B",
    "vendor": "Huawei Technologies Co., Ltd.",
    "versions": [
      {
        "status": "affected",
        "version": "LON-AL00BC00B229 and earlier versions"
      }
    ]
  }
]