CVE-2017-2729: Buffer Overflow
First published: Wed Nov 22 2017(Updated: )
The boot loaders in Honor 5A smart phones with software Versions earlier than CAM-TL00C01B193,Versions earlier than CAM-TL00HC00B193,Versions earlier than CAM-UL00C00B193 have a buffer overflow vulnerability. An attacker with the root privilege of an Android system may trick a user into installing a malicious APP. The APP can modify specific data to cause buffer overflow in the next system reboot, causing continuous system reboot or arbitrary code execution.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Honor 5a Firmware | <cam-tl00c01b193 | |
| Huawei Honor 5a | ||
| Huawei Honor 5a Firmware | <cam-tl00hc00b193 | |
| Huawei Honor 5a Firmware | <cam-ul00c00b193 | |
| Huawei P8 Lite Firmware | <ale-l02c635b568 | |
| Huawei P8 Lite | ||
| Huawei P8 Lite Firmware | <ale-l21c10b541 | |
| Huawei P8 Lite Firmware | <ale-l21c185b568 | |
| Huawei P8 Lite Firmware | <ale-l21c432b596 | |
| Huawei P8 Lite Firmware | <ale-l21c464b595 | |
| Huawei P8 Lite Firmware | <ale-l21c636b568 | |
| Huawei P8 Lite Firmware | <ale-l23c605b535 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2017-2729?
CVE-2017-2729 is a vulnerability found in the boot loaders of Honor 5A smart phones with software versions earlier than CAM-TL00C01B193, CAM-TL00HC00B193, and CAM-UL00C00B193.
What is the severity of CVE-2017-2729?
CVE-2017-2729 has a severity rating of 7.8 (Critical).
Which Huawei devices are affected by CVE-2017-2729?
Huawei Honor 5A firmware versions earlier than CAM-TL00C01B193, CAM-TL00HC00B193, and CAM-UL00C00B193 are affected.
How can an attacker exploit CVE-2017-2729?
An attacker with root privilege of an Android system can trick a user into installing a malicious app to exploit the vulnerability.
Are other Huawei devices affected by CVE-2017-2729?
No, other Huawei devices are not affected by CVE-2017-2729.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei honor 5a firmware
- canonical/huawei honor 5a
- canonical/huawei p8 lite firmware
- canonical/huawei p8 lite