HIGHπŸ‡΅πŸ‡± Wersja polska

CVE-2017-8210

CVSS 7.8v3.0pub. 2017-11-22upd. 2026-05-13

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, versions earlier than Berlin-L21HNC432B360 have a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP which has the root privilege of the Android system, the APP can send a specific parameter to the driver of the smart phone, causing a system reboot or arbitrary code execution.

CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Huawei Honor 5c

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor 5c Firmware

    OS
    Huawei
    < nem-al10c00b356

  • Huawei Honor 6x

    HW
    Huawei
    wszystkie wersje

  • Huawei Honor 6x Firmware

    OS
    Huawei
    < berlin-l21hnc432b360
πŸ”΅
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2017-2697HIGH7.8ten sam produkt

The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B...

CVE-2017-8208HIGH7.8ten sam produkt

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve...

CVE-2017-8209HIGH7.8ten sam produkt

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve...

CVE-2017-8211HIGH7.8ten sam produkt

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve...

CVE-2017-8212HIGH7.8ten sam produkt

The driver of honor 5C,honor 6x Huawei smart phones with software of versions earlier than NEM-AL10C00B356, ve...

CVE-2017-8210 β€” Huawei β€” Honor 5C β€” HIGH β€” CVSS 7.8 | CVEbaza.pl