Buffer Overflow Vulnerability in Huawei Smartphones
CVE-2017-8169
7.8HIGH
Summary
Huawei smartphones running software versions prior to VIE-L09C40B360 are susceptible to a buffer overflow vulnerability stemming from inadequate parameter validation. This flaw can be exploited when a user is manipulated into installing a malicious application that gains root privileges. Once installed, the malicious app can send specially crafted parameters to the device, potentially causing it to restart or even execute arbitrary code, which may compromise the device's security.
Affected Version(s)
VIE-L09 Earlier than VIE-L09C40B360 versions
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved