CVE-2017-2707

7.1 highEPSS 0.3%

Mate 9 smartphones with software MHA-AL00AC00B125 have a privilege escalation vulnerability in Push module. An attacker tricks a user to save a rich media into message on the smart phone, which could be exploited to cause the attacker to delete message or fake user to send message.

Severity

CVSS 3.0

7.1 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-494
Published: 2017-11-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

huawei:mate_9_firmware

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170712-02-push-en
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170712-02-push-en

Check your stack JSON