CVE-2017-15308

High

Published: 22/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Huawei iReader app before version 8.0.2.301 has an input validation vulnerability that allows an attacker to control app access and load malicious websites.

Risk Assessment

An attacker can exploit this vulnerability to execute malicious code within the app, potentially compromising user data.

Recommendation

It is recommended to update the Huawei iReader app to version 8.0.2.301 or later to mitigate this vulnerability.

Other vulnerabilities in Huawei iReader app

CVE-2017-15309High
The Huawei iReader app before version 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. An attacker can exploit this vulnerability to store malicious files in an arbitrary directory.

Original NVD description (English source)

Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL used for loading network data. An attacker can control app access and load malicious websites created by the attacker, and the code in webpages would be loaded and run.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS