CVE-2017-8204: Buffer Overflow
The Bastet driver of Honor 9 Huawei smart phones with software of versions earlier than Stanford-AL10C00B175 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege; the APP can send a specific parameter to the driver of the smart phone, causing arbitrary code execution
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-8204?
CVE-2017-8204 is a buffer overflow vulnerability in the Bastet driver of Honor 9 Huawei smart phones with software versions earlier than Stanford-AL10C00B175.
What causes the vulnerability?
The vulnerability is caused by the lack of parameter validation in the Bastet driver.
What is the severity of CVE-2017-8204?
The severity of CVE-2017-8204 is critical, with a CVSS score of 7.8.
How can an attacker exploit CVE-2017-8204?
An attacker can exploit CVE-2017-8204 by tricking a user into installing a malicious app with root privilege.
Is the Huawei Honor 9 affected by CVE-2017-8204?
No, the Huawei Honor 9 is not affected by CVE-2017-8204.