CVE-2017-17324: Huawei Mate 9 Pro Firmware

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Huawei Mate 9 Pro smartphones with software LON-AL00BC00B139D; LON-AL00BC00B229 have an integer overflow vulnerability. The camera driver does not validate the external input parameters and causes an integer overflow, which in the after processing results in a buffer overflow. An attacker tricks the user to install a crafted application, successful exploit could cause malicious code execution.

Affected products

• Huawei Mate 9 Pro Firmware: version lon-al00bc00b139d only; version lon-al00bc00b229 only

Published 2018-03-09. Last modified 2026-06-17.