CVE-2017-8184

Name: CVE-2017-8184
Creator: NVD / NIST
Published: 2017-11-22T19:29:04.46+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.65%

Last modified Jun 17, 2026

CVE-2017-8184 is a vulnerability of currently unknown severity. MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage.. EPSS estimates a 0.65% chance of exploitation in the next 30 days.

Description

MTK platform in Huawei smart phones with software of earlier than Nice-AL00C00B160 versions, earlier than Nice-AL10C00B140 versions has a any memory access vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to cause to any memory access vulnerabilities, leading to sensitive information leakage.

Metrics

EPSS Probability

0.65%

46.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-119

Affected Software

Vendor	Product	Versions
Huawei	Mtk Platform Smart Phone Firmware	< nice-al10c00b140
Huawei	Mtk Platform Smart Phone Firmware	< nice-al00c00b160

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-enVendor Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-mtk-enVendor Advisory

Timeline

Published: Nov 22, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-8184?

How severe is CVE-2017-8184?

Severity scoring for CVE-2017-8184 is pending analysis. The EPSS model estimates a 0.65% probability of exploitation in the next 30 days.

How do I fix CVE-2017-8184?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-8184?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST