CVE-2017-8211: Buffer Overflow
The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-8211?
CVE-2017-8211 is a buffer overflow vulnerability in the driver of honor 5C and honor 6x Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360.
How severe is CVE-2017-8211?
CVE-2017-8211 has a severity rating of 7.8 (critical).
How can this vulnerability be exploited?
This vulnerability can be exploited by tricking a user into installing a malicious app, which triggers the buffer overflow and allows an attacker to execute arbitrary code.
Which Huawei smartphones are affected by CVE-2017-8211?
Honor 5C and honor 6x Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 are affected.
How can the vulnerability in Huawei smartphones be fixed?
To fix the vulnerability, users should update their software to versions NEM-AL10C00B356 or later for honor 5C, and Berlin-L21HNC432B360 or later for honor 6x.