Input validation

2017-12-2217:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.9%

JSON

Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insufficient input validation. An attacker could exploit this vulnerability by sending specially crafted NFC messages to the target device. Successful exploit could make a service crash.

CPENameOperatorVersion
baggio-l03a_firmwareeqbgo-l3c158b3custc158d1
baggio-l03a_firmwareeqbgo-l3c331b9custc331d1

CPE	Name	Operator	Version
	baggio-l03a_firmware	eq	bgo-l3c158b3custc158d1
	baggio-l03a_firmware	eq	bgo-l3c331b9custc331d1

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20171108-01-nfc-en