CVE-2017-15311

The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before BLA-AL00 8.0.0.120(SP2C00), before MHA-AL00B 8.0.0.334(C00), and before LON-AL00B 8.0.0.334(C00) have a stack overflow vulnerability due to the lack of parameter validation. An attacker could send malicious packets to the smart phones within radio range by special wireless device, which leads stack overflow when the baseband module handles these packets. The attacker could exploit this vulnerability to perform a denial of service attack or remote code execution in baseband module.

• CWE-119

• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171125-01-baseband-enVendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171125-01-baseband-enVendor Advisory

Published

Dec 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15306The kvm_vm_ioctl_check_extension function in arch/powerpc/kv…
• CVE-2017-15307Huawei Honor 8 smartphone with software versions earlier tha…
• CVE-2017-15308Huawei iReader app before 8.0.2.301 has an input validation …
• CVE-2017-15309Huawei iReader app before 8.0.2.301 has a path traversal vul…
• CVE-2017-1531IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable…
• CVE-2017-15310Huawei iReader app before 8.0.2.301 has an arbitrary file de…
• CVE-2017-15312Huawei SmartCare V200R003C10 has a stored XSS (cross-site sc…
• CVE-2017-15313Huawei SmartCare V200R003C10 has a CSV injection vulnerabili…
• CVE-2017-15314Huawei DP300 V500R002C00, RP200 V500R002C00SPC200, V600R006C…
• CVE-2017-15315Patch module of Huawei NIP6300 V500R001C20SPC100, V500R001C2…
• CVE-2017-15316The GPU driver of Mate 9 Huawei smart phones with software b…
• CVE-2017-15317AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; …