The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
References
Link | Resource |
---|---|
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en | Issue Tracking Vendor Advisory |
Configurations
History
No history.
Information
Published : 2017-11-22 19:29
Updated : 2024-02-28 16:04
NVD link : CVE-2017-8207
Mitre link : CVE-2017-8207
CVE.ORG link : CVE-2017-8207
JSON object : View
Products Affected
huawei
- honor_5c
- honor_6x_firmware
- honor_5c_firmware
- honor_6x
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer