CVE-2017-8209: Buffer Overflow
The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-8209?
CVE-2017-8209 is a buffer overflow vulnerability found in the driver of honor 5C and honor 6x Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360.
How severe is CVE-2017-8209?
CVE-2017-8209 has a severity rating of 7.8 (critical).
How does CVE-2017-8209 affect Huawei smartphones?
CVE-2017-8209 allows an attacker to execute arbitrary code by tricking a user into installing a malicious app.
Which Huawei smartphones are affected by CVE-2017-8209?
Huawei honor 5C and honor 6x smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 are affected by CVE-2017-8209.
How can I fix CVE-2017-8209?
To fix CVE-2017-8209, users should update their honor 5C and honor 6x Huawei smartphones to software versions NEM-AL10C00B356 and Berlin-L21HNC432B360 or later.