CVE-2017-8182: Huawei Mtk Platform Smart Phone Firmware

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a out-of-bound read vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter and cause to memory out-of-bound read.

Affected products

• Huawei Mtk Platform Smart Phone Firmware: before nice-al10c00b140 (fixed in nice-al10c00b140); before nice-al00c00b160 (fixed in nice-al00c00b160)

Published 2017-11-22. Last modified 2026-06-17.