CVE-2017-8144: Huawei Honor 5a Firmware

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Honor 5A,Honor 8 Lite,Mate9,Mate9 Pro,P10,P10 Plus Huawei smartphones with software the versions before CAM-L03C605B143CUSTC605D003,the versions before Prague-L03C605B161,the versions before Prague-L23C605B160,the versions before MHA-AL00C00B225,the versions before LON-AL00C00B225,the versions before VTR-AL00C00B167,the versions before VTR-TL00C01B167,the versions before VKY-AL00C00B167,the versions before VKY-TL00C01B167 have a resource exhaustion vulnerability due to configure setting. An attacker tricks a user into installing a malicious application, the application may turn on the device flash-light and rapidly drain the device battery.

Affected products

• Huawei Honor 5a Firmware: before cam-l03c605b143custc605d003 (fixed in cam-l03c605b143custc605d003)
• Huawei Honor 8 Lite Firmware: before prague-l03c605b161 (fixed in prague-l03c605b161); before prague-l23c605b160 (fixed in prague-l23c605b160)
• Huawei Mate 9 Firmware: before mha-al00c00b225 (fixed in mha-al00c00b225)
• Huawei Mate 9 Pro Firmware: before lon-al00c00b225 (fixed in lon-al00c00b225)
• Huawei p10 Firmware: before vtr-al00c00b167 (fixed in vtr-al00c00b167); before vtr-tl00c01b167 (fixed in vtr-tl00c01b167)
• Huawei p10 Plus Firmware: before vky-al00c00b167 (fixed in vky-al00c00b167); before vky-tl00c01b167 (fixed in vky-tl00c01b167)

Published 2017-11-22. Last modified 2026-06-17.