CVE-2017-8210: Buffer Overflow
The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-8210?
CVE-2017-8210 is a buffer overflow vulnerability found in the driver of honor 5C and honor 6x Huawei smartphones.
What is the severity of CVE-2017-8210?
CVE-2017-8210 has a severity rating of 7.8, which is considered critical.
How can an attacker exploit CVE-2017-8210?
An attacker can exploit CVE-2017-8210 by tricking a user into installing a malicious app.
Which software versions are affected by CVE-2017-8210?
Versions earlier than NEM-AL10C00B356 for Huawei Honor 5c firmware and versions earlier than Berlin-L21HNC432B360 for Huawei Honor 6x firmware are affected.
How can I fix CVE-2017-8210?
To fix CVE-2017-8210, users should update their software to versions NEM-AL10C00B356 for Huawei Honor 5c firmware and Berlin-L21HNC432B360 for Huawei Honor 6x firmware.