Arbitrary Memory Write Vulnerability in Huawei Smartphone Camera Driver
CVE-2017-8181

7.8HIGH

Key Information:

Vendor
McAfee
Status
Nice-al00
Vendor
CVE Published:
22 November 2017

Summary

The MTK platform camera driver in Huawei smartphones exhibits a vulnerability due to insufficient input verification. This flaw enables an attacker to persuade a user to install a malicious application with elevated privileges. Upon receiving specially crafted parameters, the driver can perform arbitrary memory writes, leading to potential privilege escalation and unauthorized access within the device.

Affected Version(s)

Nice-AL00 Versions earlier than Nice-AL00C00B155

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.