CVE-2017-8212: Buffer Overflow
The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2017-8212.
What is the severity of CVE-2017-8212?
The severity of CVE-2017-8212 is critical with a CVSS score of 7.8.
Which devices are affected by this vulnerability?
The driver of honor 5C and honor 6x Huawei smartphones with software versions earlier than NEM-AL10C00B356 and Berlin-L21HNC432B360 respectively are affected.
How can an attacker exploit CVE-2017-8212?
An attacker can exploit CVE-2017-8212 by tricking a user into installing a malicious app.
Is there a fix available for this vulnerability?
Yes, Huawei has released a security advisory with the fix for this vulnerability. Please refer to the following link for more information: http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20170801-01-smartphone-en