Huawei Mate 9 Pro Fimware vulnerabilities

3 CVEs affecting Huawei Mate 9 Pro Fimware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-5244, published 2019-06-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-17173, published 2018-06-14. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. Due to insufficient parameters verification GPU driver of Mate 9 Pro Huawei smart phones with the versions before LON-AL00B 8.0.0.356(C00) has an arbitrary memory free vulnerability. An attacker can…
CVE-2019-5244, published 2019-06-04. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. Mate 9 Pro Huawei smartphones earlier than LON-L29C 8.0.0.361(C636) versions have an information leak vulnerability due to the lack of input validation. An attacker tricks the user who has root…
CVE-2017-17326, published 2018-03-09. Medium severity, CVSS 4.6. EPSS: 0.2% chance of exploitation in the next 30 days. Huawei Mate 9 Pro Smartphones with software of LON-AL00BC00B139D; LON-AL00BC00B229 have an activation lock bypass vulnerability. The smartphone is supposed to be activated by the former account after…