{"schemaVersion":3,"id":"CVE-2017-15325","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211, versions earlier than Prague-AL00BC00B211, versions earlier than Prague-AL00CC00B211, versions earlier than Prague-TL00AC01B211, versions earlier than Prague-TL10AC01B211 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and execute it as a specific privilege; the APP can then send a specific parameter to the driver of the smart phone, causing arbitrary code execution.","dates":{"published":"2018-03-23T16:00:00.000Z","modified":"2024-09-17T04:14:18.256Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.3,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0099,"percentile":0.62116,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":-0.5039999999999999,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.01494},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01494,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.0099,"percentile":0.62116}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.01494,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.0099,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.0099,"percentile":0.62116}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-190","name":"Integer Overflow or Wraparound","description":"The product performs a calculation that can\n         produce an integer overflow or wraparound when the logic\n         assumes that the resulting value will always be larger than\n         the original value. This occurs when an integer value is\n         incremented to a value that is too large to store in the\n         associated representation. When this occurs, the value may\n         become a very small or negative number.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/190.html"}],"affected":[{"vendor":"huawei technologies co., ltd.","product":"prague","name":"Prague","label":"prague","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"Versions earlier than Prague-AL00AC00B211, Versions earlier than Prague-AL00BC00B211, Versions earlier than Prague-AL00CC00B211, Versions earlier than Prague-TL00AC01B211, Versions earlier than Prague-TL10AC01B211","noFixRecorded":false,"fixedIn":null}],"versionsText":"Versions earlier than Prague-AL00AC00B211, Versions earlier than Prague-AL00BC00B211, Versions earlier than Prague-AL00CC00B211, Versions earlier than Prague-TL00AC01B211, Versions earlier than Prague-TL10AC01B211","eol":null,"hubHref":"/vendor/huawei_technologies_co_ltd/prague"},{"vendor":"huawei","product":"prague-al00a_firmware","name":"prague-al00a firmware","label":"prague-al00a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< prague-al00ac00b211","noFixRecorded":false,"fixedIn":null}],"versionsText":"< prague-al00ac00b211","eol":null,"hubHref":"/vendor/huawei/prague-al00a"},{"vendor":"huawei","product":"prague-al00b_firmware","name":"prague-al00b firmware","label":"prague-al00b_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< prague-al00bc00b211","noFixRecorded":false,"fixedIn":null}],"versionsText":"< prague-al00bc00b211","eol":null,"hubHref":"/vendor/huawei/prague-al00b"},{"vendor":"huawei","product":"prague-al00c_firmware","name":"prague-al00c firmware","label":"prague-al00c_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< prague-al00cc00b211","noFixRecorded":false,"fixedIn":null}],"versionsText":"< prague-al00cc00b211","eol":null,"hubHref":"/vendor/huawei/prague-al00c"},{"vendor":"huawei","product":"prague-tl00a_firmware","name":"prague-tl00a firmware","label":"prague-tl00a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< prague-tl00ac01b211","noFixRecorded":false,"fixedIn":null}],"versionsText":"< prague-tl00ac01b211","eol":null,"hubHref":"/vendor/huawei/prague-tl00a"},{"vendor":"huawei","product":"prague-tl10a_firmware","name":"prague-tl10a firmware","label":"prague-tl10a_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< prague-tl10ac01b211","noFixRecorded":false,"fixedIn":null}],"versionsText":"< prague-tl10ac01b211","eol":null,"hubHref":"/vendor/huawei/prague-tl10a"}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180321-01-smartphone-en","label":"www.huawei.com/en/psirt/security-advisories/huawei-sa-20180321-01-smartphone-en","hostname":"www.huawei.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2018-03-23T16:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-17T04:14:18.256Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T12:13:08.791Z","stale":false,"partial":false}}