How severe is CVE-2017-2734?

CVE-2017-2734 has a CVSS 3.x base score of 5.5, rated medium severity. It is exploitable over local access with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2017-2734 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (38th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2017-2734?

CVE-2017-2734 affects Huawei P9 Plus Firmware. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2017-2734?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2017-2734 published?

CVE-2017-2734 was published on 2017-11-22 and last updated on 2026-06-17.

CVE-2017-2734

CVE-2017-2734 is a medium-severity vulnerability in Huawei P9 Plus Firmware with a CVSS 3.x base score of 5.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-400.

Key facts

Severity: Medium (CVSS 3.x base score 5.5)
CVSS v2: 7.1
EPSS exploit prediction: 0% (38th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-400
Affected product: Huawei P9 Plus Firmware
Published: 2017-11-22
Last modified: 2026-06-17

Description

P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a large number of memory allocation and the smart phone will be crash for memory exhaustion.

Frequently asked questions

What is CVE-2017-2734?: P9 Plus smartphones with software versions earlier before VIE-AL10BC00B386 have a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, and the application can send given parameter to specific interface, which make a large number of memory allocation and the smart phone will be crash for memory exhaustion.
How severe is CVE-2017-2734?: CVE-2017-2734 has a CVSS 3.x base score of 5.5, rated medium severity. It is exploitable over local access with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2017-2734 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (38th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2017-2734?: CVE-2017-2734 affects Huawei P9 Plus Firmware. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2017-2734?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2017-2734 published?: CVE-2017-2734 was published on 2017-11-22 and last updated on 2026-06-17.

References

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170419-02-smartphone-en

Affected products (1)

cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*

More vulnerabilities in Huawei P9 Plus Firmware

CVE-2016-8783 — High (CVSS 7.8): Touchscreen drive in Huawei H60 (Honor 6) Versions earlier than H60-L02_6.12.16 and P9 Plus Versions earlier than…
CVE-2017-8140 — High (CVSS 7.8): The soundtrigger driver in P9 Plus smart phones with software versions earlier than VIE-AL10BC00B353 has a memory…
CVE-2016-8761 — High (CVSS 7.8): Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software…
CVE-2016-8760 — High (CVSS 7.8): Touchscreen driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with…
CVE-2016-8759 — High (CVSS 7.8): Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software…
CVE-2017-2731 — Medium (CVSS 5.5): The vibrator service in P9 Plus smart phones with software versions earlier before VIE-AL10C00B386 has DoS…

All CVEs affecting Huawei P9 Plus Firmware →

Other CWE-400 (Uncontrolled Resource Consumption) vulnerabilities

CVE-2026-46775 — Critical (CVSS 9.9): Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0.…
CVE-2025-61303 — Critical (CVSS 9.8): Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a…
CVE-2025-43193 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7,…
CVE-2025-24269 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to…
CVE-2025-24264 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4,…
CVE-2025-24260 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5,…

Browse all CWE-400 (Uncontrolled Resource Consumption) vulnerabilities →