Security Advisory - DoS Vulnerability in Some Huawei Products

There is a denial of service (DoS) vulnerability in some Huawei smart phones due to the input parameters validation. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a large number of memory allocation and the smart phone will be crash for memory exhaustion. (Vulnerability ID: HWPSIRT-2017-02033)
This vulnerability has been assigned a CVE ID: CVE-2017-2734.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-02-smartphone-en