PT-2017-18184

CVE-2017-8179

·

Published

2017-11-22

·

Updated

2017-12-08

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Huawei smart phones with software versions earlier than Nice-AL00C00B155
Description The issue is related to a buffer overflow vulnerability in the camera driver of the MTK platform. It occurs due to insufficient input verification, allowing an attacker to trick a user into installing a malicious application with special privileges. This application can send a specific parameter to the smartphone's driver, resulting in privilege escalation.
Recommendations For versions earlier than Nice-AL00C00B155, update the software to a version that includes the fix for this issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾