CVE-2017-8181

Name of the Vulnerable Software and Affected Versions Huawei smart phones with software versions earlier than Nice-AL00C00B155

Description The issue is related to a camera driver on the MTK platform, which has an arbitrary memory write vulnerability due to insufficient input verification. This can be exploited by an attacker who tricks a user into installing a malicious application with special privileges, allowing the attacker to send a specific parameter to the driver and cause privilege escalation.

Recommendations For versions earlier than Nice-AL00C00B155, update to a version Nice-AL00C00B155 or later to resolve the issue.