Security Advisory - Buffer Overflow Vulnerability in the NFC Module of Some Huawei Mobile Phones

The Near Field Communication (NFC) module of some Huawei mobile phones has a buffer overflow vulnerability due to the lack of input validation. An attacker may use an NFC card reader or another device to inject malicious data into a target mobile phone. Successful exploit could lead to system restart or arbitrary code execution. (Vulnerability ID: HWPSIRT-2017-09008)
This vulnerability has been assigned a CVE ID: CVE-2017-17225.
Huawei has released software updates to fix this vulnerability. This advisory is available at the following link:
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20180130-01-smartphone-en