Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2017-2709: HiGame and SkyTone can crash from bad app
CVE-2017-2709 · published 8 years ago
Summary
Versions of HiGame before 7.3.0 and SkyTone before 8.1.1 may stop working if a user installs a malicious app that sends specially crafted data. The apps do not properly check this data, leading to a denial of service that makes the game or phone unusable. Update to the latest versions or restrict installation of unknown apps to prevent the issue.
What to do
- Update huawei higame to version 7.3.0 or later.
- Update huawei skytone to version 8.1.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| huawei | higame |
< 7.3.0 cpe:2.3:a:huawei:higame:*:*:*:*:*:*:*:* |
| huawei | skytone |
< 8.1.1 cpe:2.3:a:huawei:skytone:*:*:*:*:*:*:*:* |
Original advisory text
HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. An attacker tricks a user into installing a malicious application on th...
HiGame with software earlier than 7.3.0 versions, SkyTone with software earlier than 8.1.1 versions have a DoS Vulnerability. An attacker tricks a user into installing a malicious application on the smart phone, the attacker can send malformed packets to the device. Due to the lack of adequate input validation of APPs, which causes the APPs Denial of Service.
References
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-20Improper Input Validation
Timeline
Published22 Nov 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-2709 · NVD
Track software like this
Free during beta