CVE-2017-8202
The CameraISP driver of some Huawei smart phones with software of versions earlier than Prague-AL00AC00B205,versions earlier than Prague-AL00BC00B205,versions earlier than Prague-AL00CC00B205,versions earlier than Prague-TL00AC01B205,versions earlier than Prague-TL10AC01B205 has a buffer overflow vulnerability due to the lack of parameter validation. An attacker tricks a user into installing a malicious APP, the APP can send a specific parameter to the CameraISP driver of the smart phone, causing system reboot.
- Score
- CVSS 3.0 5.5 Medium
- Status
- Modified - psirt@huawei.com
- Published
- 2017-11-22
- Last modified
- 2024-09-17
- Weaknesses
- CWE-119
Affected products
- Prague-al00a Firmware (Huawei)
- Prague-al00b Firmware (Huawei)
- Prague-al00c Firmware (Huawei)
- Prague-tl00a Firmware (Huawei)
- Prague-tl10a Firmware (Huawei)
- Prague-al00aprague-al00bprague-al00cprague-tl00aprague-tl10a (Huawei Technologies Co. Ltd.)
References
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20171115-01-smartphone-en
- http://www.securityfocus.com/bid/101959
