Buffer Overflow in Huawei Smartphones Leading to Risk of Code Execution
CVE-2017-8212

7.8HIGH

Key Information:

Vendor
McAfee
Status
Honor 5c,honor 6x
Vendor
CVE Published:
22 November 2017

Summary

A buffer overflow vulnerability exists in certain Huawei smartphones, specifically the Honor 5C and Honor 6X, due to inadequate parameter validation within the device driver. This flaw can be exploited by an attacker who persuades a user to install a malicious application with root privileges. Once executed, this application can send crafted parameters to the driver's code, leading to potential system reboots or allowing arbitrary code execution, thereby compromising the security and functionality of the device.

Affected Version(s)

honor 5C,honor 6x Versions earlier than NEM-AL10C00B356,Versions earlier than Berlin-L21HNC432B360

References

http://www.huawei.com/en/psirt/security-advisories/huawei...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.