CVE-2017-17307

CVE-2017-17307 affects Huawei smartphones (e.g., VNS-L21AUTC555B141). The root cause is an out-of-bounds read due to missing string terminators in strings, which an attacker can trigger by tricking a user into installing a malicious app. The vulnerable component is the device’s software handling ...