Buffer Overflow Vulnerability in Huawei Smartphones
CVE-2017-8169

7.8HIGH

Key Information:

Vendor
McAfee
Status
Vendor
CVE Published:
15 November 2017

Summary

Huawei smartphones running software versions prior to VIE-L09C40B360 are susceptible to a buffer overflow vulnerability stemming from inadequate parameter validation. This flaw can be exploited when a user is manipulated into installing a malicious application that gains root privileges. Once installed, the malicious app can send specially crafted parameters to the device, potentially causing it to restart or even execute arbitrary code, which may compromise the device's security.

Affected Version(s)

VIE-L09 Earlier than VIE-L09C40B360 versions

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.