CVE-2017-2729: Buffer Overflow
The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-UL00C00B193 have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-2729?
CVE-2017-2729 is a vulnerability found in the boot loaders of Honor 5A smart phones with software versions earlier than CAM-TL00C01B193, CAM-TL00HC00B193, and CAM-UL00C00B193.
What is the severity of CVE-2017-2729?
CVE-2017-2729 has a severity rating of 7.8 (Critical).
Which Huawei devices are affected by CVE-2017-2729?
Huawei Honor 5A firmware versions earlier than CAM-TL00C01B193, CAM-TL00HC00B193, and CAM-UL00C00B193 are affected.
How can an attacker exploit CVE-2017-2729?
An attacker with root privilege of an Android system can trick a user into installing a malicious app to exploit the vulnerability.
Are other Huawei devices affected by CVE-2017-2729?
No, other Huawei devices are not affected by CVE-2017-2729.