PT-2017-18185

CVE-2017-8180

·

تاريخ النشر

2017-11-22

·

تاريخ التحديث

2017-12-08

الوصف من

CVSS 3.1
7.8
عالية
المقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Huawei smart phones with software versions earlier than Nice-AL00C00B155
Description The issue is related to a buffer overflow vulnerability in the camera driver of the MTK platform. It occurs due to insufficient input verification, allowing an attacker to trick a user into installing a malicious application with special privileges. This application can send a specific parameter to the smartphone's driver, resulting in privilege escalation.
Recommendations For versions earlier than Nice-AL00C00B155, update to a version that includes the fix for this issue to prevent privilege escalation.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾