Buffer Overflow Vulnerability in Huawei Smartphone Camera Driver
CVE-2017-8179

7.8HIGH

Key Information:

Vendor
McAfee
Status
Nice-al00
Vendor
CVE Published:
22 November 2017

Summary

A buffer overflow vulnerability exists in the camera driver of Huawei smartphones that run software versions prior to Nice-AL00C00B155. This flaw arises from inadequate input validation, which allows attackers to convince users to install malicious applications. These applications can obtain special privileges and exploit the vulnerability to escalate user permissions, potentially compromising the device's integrity and security.

Affected Version(s)

Nice-AL00 Versions earlier than Nice-AL00C00B155

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/101956
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.