Huawei p9 Plus Firmware vulnerabilities

9 CVEs affecting Huawei p9 Plus Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-17171, published 2018-06-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-8140, published 2017-11-22. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory double free vulnerability. An attacker tricks a user into installing a malicious…
CVE-2016-8783, published 2018-03-09. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. Touchscreen drive in Huawei H60 (Honor 6) Versions earlier than H60-L02_6.12.16 and P9 Plus Versions earlier than VIE-AL10BC00B356 has a stack overflow vulnerabilities. An attacker tricks a user into…
CVE-2016-8761, published 2017-04-02. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows…
CVE-2016-8760, published 2017-04-02. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a heap overflow vulnerability, which…
CVE-2016-8759, published 2017-04-02. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows…
CVE-2017-2711, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.7% chance of exploitation in the next 30 days. P9 Plus smartphones with software earlier than VIE-AL10C00B352 versions have an input validation vulnerability in the touchscreen Driver. An attacker can tricks a user into installing a malicious…
CVE-2017-2731, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS vulnerability. An attacker can tricks a user into installing a malicious application on the…
CVE-2017-2734, published 2017-11-22. Medium severity, CVSS 5.5. EPSS: 0.5% chance of exploitation in the next 30 days. P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart…
CVE-2017-17171, published 2018-06-01. Medium severity, CVSS 4.2. EPSS: 0.5% chance of exploitation in the next 30 days. Some Huawei smart phones have the denial of service (DoS) vulnerability due to the improper processing of malicious parameters. An attacker may trick a target user into installing a malicious APK and…