CVE-2017-8202: Buffer Overflow
First published: Wed Nov 22 2017(Updated: )
The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Prague-al00a Firmware | <prague-al00ac00b205 | |
| Huawei Prague-al00a | ||
| Huawei Prague-al00b Firmware | <prague-al00bc00b205 | |
| Huawei Prague-al00b | ||
| Huawei Prague-al00c Firmware | <prague-al00cc00b205 | |
| Huawei Prague-al00c | ||
| Huawei Prague-tl00a Firmware | <prague-tl00ac01b205 | |
| Huawei Prague-tl00a | ||
| Huawei Prague-tl10a Firmware | <prague-tl10ac01b205 | |
| Huawei Prague-tl10a |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/author
- agent/weakness
- agent/severity
- agent/references
- agent/type
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei prague-al00a firmware
- canonical/huawei prague-al00a
- canonical/huawei prague-al00b firmware
- canonical/huawei prague-al00b
- canonical/huawei prague-al00c firmware
- canonical/huawei prague-al00c
- canonical/huawei prague-tl00a firmware
- canonical/huawei prague-tl00a
- canonical/huawei prague-tl10a firmware
- canonical/huawei prague-tl10a