HIGH🇬🇧 English

CVE-2017-8207

CVSS 7.8v3.0pub. 2017-11-22upd. 2026-05-13

The driver of honor 5C, honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.

oryginał EN
CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Huawei Honor 5c

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor 5c Firmware

    OS
    Huawei
    < nem-al10c00b356

  • Huawei Honor 6x

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor 6x Firmware

    OS
    Huawei
    < berlin-l21hnc432b360
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEMemory
CWE
Referencje

Powiązane podatności

CVE-2017-2697HIGH7.8ten sam produkt

The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B...

CVE-2017-8209HIGH7.8ten sam produkt

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve...

CVE-2017-8210HIGH7.8ten sam produkt

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve...

CVE-2017-8211HIGH7.8ten sam produkt

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve...

CVE-2017-8212HIGH7.8ten sam produkt

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve...