CVE-2017-15325: Integer Overflow
First published: Fri Mar 23 2018(Updated: )
The Bdat driver of Prague smart phones with software versions earlier than Prague-AL00AC00B211, versions earlier than Prague-AL00BC00B211, versions earlier than Prague-AL00CC00B211, versions earlier than Prague-TL00AC01B211, versions earlier than Prague-TL10AC01B211 has integer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP and execute it as a specific privilege; the APP can then send a specific parameter to the driver of the smart phone, causing arbitrary code execution.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Prague-al00a Firmware | <prague-al00ac00b211 | |
| Huawei Prague-al00a | ||
| Huawei Prague-al00b Firmware | <prague-al00bc00b211 | |
| Huawei Prague-al00b | ||
| Huawei Prague-al00c Firmware | <prague-al00cc00b211 | |
| Huawei Prague-al00c | ||
| Huawei Prague-tl00a Firmware | <prague-tl00ac01b211 | |
| Huawei Prague-tl00a | ||
| Huawei Prague-tl10a Firmware | <prague-tl10ac01b211 | |
| Huawei Prague-tl10a |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- vendor/huawei
- canonical/huawei prague-al00a firmware
- canonical/huawei prague-al00a
- canonical/huawei prague-al00b firmware
- canonical/huawei prague-al00b
- canonical/huawei prague-al00c firmware
- canonical/huawei prague-al00c
- canonical/huawei prague-tl00a firmware
- canonical/huawei prague-tl00a
- canonical/huawei prague-tl10a firmware
- canonical/huawei prague-tl10a