Security Advisory - Two DoS Vulnerabilities in Call Module of Some Huawei Smart Phones

There are two DoS vulnerabilities in the call module of some Huawei smart phones due to the lack of a parameters check. An attacker may trick a user into installing a malicious application, and the application can send given parameter to call module to crash the call and data communication process. (Vulnerability ID: HWPSIRT-2017-06008 and HWPSIRT-2017-06009)
The two vulnerabilities have been assigned two CVE IDs: CVE-2017-8145 and CVE-2017-8146.
Huawei has released software updates to fix these vulnerabilities. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170725-02-smartphone-en